kernel-2.6.18-194.6.AXS3
エラータID: AXSA:2010-456:15
Release date:
Sunday, September 26, 2010 - 16:33
Subject:
kernel-2.6.18-194.6.AXS3
Affected Channels:
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity:
High
Description:
The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc.
Security issues fixed with this release:
CVE-2010-3081
The compat_alloc_user_space() function in the Linux kernel 32/64-bit compatibility layer implementation was missing sanity checks. On 64 bits systems, a normal local user could abuse this flaw to escalate their privileges.
Solution:
Update packages.
CVEs:
CVE-2010-3081
The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010.
The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010.
Additional Info:
N/A
Download:
SRPMS
- kernel-2.6.18-194.6.AXS3.src.rpm
MD5: 1f72ba4eb5c7aef64fed10d5f57b9ec2
SHA-256: 6c61a4687adbf51a013d5240e27adced9943bd8cf9c1530503bc5029ef9244ce
Size: 80.44 MB
Asianux Server 3 for x86
- kernel-2.6.18-194.6.AXS3.i686.rpm
MD5: cfd89355ca59ba673c7c7aef29413f70
SHA-256: 340fbe06150dbd2e2105ca364e1f4d386670c61f8fe5a4361e68b4de626bcbf1
Size: 17.22 MB - kernel-devel-2.6.18-194.6.AXS3.i686.rpm
MD5: 872343fd49f94b83f60ae20a9bf8d1e9
SHA-256: b271444ccadd3871530f64273e8bf3dfa980cc16d5f1f2b8e19af5bbbc65105f
Size: 5.58 MB - kernel-PAE-2.6.18-194.6.AXS3.i686.rpm
MD5: 9708111bade14407d8402d1d95a56a81
SHA-256: 3c839ff1c482ad98b5177e53275a95f6e7a432fb3920a611add7085d0c9e96b1
Size: 17.24 MB - kernel-PAE-devel-2.6.18-194.6.AXS3.i686.rpm
MD5: cf5cff270fe406090dd1eb6b3cdac4e4
SHA-256: 4ff724c897496081009cd22361d42e61a03fdad486512966b7382e6ba91db040
Size: 5.59 MB - kernel-xen-2.6.18-194.6.AXS3.i686.rpm
MD5: 6914e98754d80fe37aa09545338b0ee3
SHA-256: a9803332ea585e7a0973e3a660c33afe0614e103a5a15cfee28ad8b809fe03dc
Size: 18.34 MB - kernel-xen-devel-2.6.18-194.6.AXS3.i686.rpm
MD5: cb2cddaa1b2a32c18ead7bec0d7aafd1
SHA-256: 7b8b70e01deb3aea7034a6df2c8950b91e0628fdf6ac5fb2405ee4efc6f051fa
Size: 5.59 MB - kernel-doc-2.6.18-194.6.AXS3.noarch.rpm
MD5: 7c470d635fc5835e145826ebac16e237
SHA-256: 87e2566c3c508e56047112b5c32d3215d63a58695a3ac9feeddd3e5a1b86fe04
Size: 3.06 MB - kernel-headers-2.6.18-194.6.AXS3.i386.rpm
MD5: 30bb1db1bacb0d89ae6cc8176dd23544
SHA-256: 86c7657280a2fd7f5c5a05a823686ffc23d834fe24ab3554d90ecd3a09b6c059
Size: 1.06 MB
Asianux Server 3 for x86_64
- kernel-2.6.18-194.6.AXS3.x86_64.rpm
MD5: 861bddd1ee1ac45e8fafe0553e3bc2c3
SHA-256: 384f9910e3b77a5a0cb813e82cd1f18b67308900379ae4f71cfb72975c421a75
Size: 19.16 MB - kernel-devel-2.6.18-194.6.AXS3.x86_64.rpm
MD5: a1520aae3292f85c9cf18c4e92ec915f
SHA-256: ed2e1a43c98d0e83b5bec5aa90c1d9b5ca58b4b27e565d7c16e088f0f213ce65
Size: 5.59 MB - kernel-headers-2.6.18-194.6.AXS3.x86_64.rpm
MD5: 389eb78b8f5817b7457cc1212f7eda40
SHA-256: 01ce6d7957475ec4b6926da69ffae88b48401f620bc3ed740d3305d1d5ee59dd
Size: 1.10 MB - kernel-xen-2.6.18-194.6.AXS3.x86_64.rpm
MD5: 9efb5c468c1fafebd4006e3b91d68677
SHA-256: 4ebe431568cc99bb7e244b8af9477f5780a37c3408771a0f3adc1cd04ab88280
Size: 20.05 MB - kernel-xen-devel-2.6.18-194.6.AXS3.x86_64.rpm
MD5: 8d38cf2413fa0956297cbb7e16f0932d
SHA-256: ab3b7bad8406364779c8be0da85de6e35d5d487e86803e3241466e747a47a1eb
Size: 5.59 MB - kernel-doc-2.6.18-194.6.AXS3.noarch.rpm
MD5: d615de95e4eea69db892c95db9d311f6
SHA-256: 63e87428cc5c8fca8246cb3bd59980b89db53a9f0b1c93328a0a2c47a3935d10
Size: 3.06 MB