RHSA-2015:0870: Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linuxoperating system. It was found that the Linux kernel's Infiniband subsystem did not properly sanitize input parameters while registering memory regions fromuser space via the (u)verbs API. A local user with access to a/dev/infiniband/uverbsX device could use this flaw to crash the system or,potentially, escalate their privileges on the system. (CVE-2014-8159,Important)Red Hat would like to thank Mellanox for reporting this issue.All kernel users are advised to upgrade to these updated packages, whichcontain a backported patch to correct this issue. The system must berebooted for this update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2015:0870?
The severity of RHSA-2015:0870 is classified as important.
How do I fix RHSA-2015:0870?
To fix RHSA-2015:0870, you should upgrade to kernel version 2.6.18-348.30.1.el5 or later.
Which systems are affected by RHSA-2015:0870?
RHSA-2015:0870 affects systems running the kernel package on Red Hat Enterprise Linux 5 (RHEL 5).
What vulnerability does RHSA-2015:0870 address?
RHSA-2015:0870 addresses a vulnerability in the Infiniband subsystem of the Linux kernel related to improper input sanitization.
Is a reboot required after applying the fix for RHSA-2015:0870?
Yes, a reboot is required to ensure the changes take effect after applying the fix for RHSA-2015:0870.