RHSA-2015:0919: Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linuxoperating system. It was found that the Linux kernel's Infiniband subsystem did not properly sanitize input parameters while registering memory regions fromuser space via the (u)verbs API. A local user with access to a/dev/infiniband/uverbsX device could use this flaw to crash the system or,potentially, escalate their privileges on the system. (CVE-2014-8159,Important)Red Hat would like to thank Mellanox for reporting this issue.All kernel users are advised to upgrade to these updated packages, whichcontain a backported patch to correct this issue. The system must berebooted for this update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2015:0919?
The severity of RHSA-2015:0919 is classified as important.
How do I fix RHSA-2015:0919?
To fix RHSA-2015:0919, update the kernel to version 2.6.18-238.55.1.el5 or newer.
Who is affected by RHSA-2015:0919?
RHSA-2015:0919 affects users running the specified versions of the Linux kernel on Red Hat Enterprise Linux 5.
What components are involved in RHSA-2015:0919?
RHSA-2015:0919 involves the Infiniband subsystem of the Linux kernel and certain kernel packages.
Is there a workaround for RHSA-2015:0919?
A workaround for RHSA-2015:0919 is not explicitly documented; upgrading is the recommended solution.