kernel-2.6.18-274.3.AXS3
エラータID: AXSA:2011-362:08
Release date:
Thursday, November 24, 2011 - 19:45
Subject:
kernel-2.6.18-274.3.AXS3
Affected Channels:
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity:
High
Description:
The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc.
Security issues fixed with this release:
CVE-2009-4067
CVE-2011-1160
CVE-2011-1585
CVE-2011-1833
No information available at the time of writing, please refer to the CVE links below.
CVE-2011-2484
The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application.
CVE-2011-2496
No information available at the time of writing, please refer to the CVE links below.
CVE-2011-2695
Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service (BUG_ON and system crash) by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsigned integer.
CVE-2011-2699
No information available at the time of writing, please refer to the CVE links below.
CVE-2011-2723
The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.
CVE-2011-2942
CVE-2011-3131
CVE-2011-3188
CVE-2011-3191
CVE-2011-3209
CVE-2011-3347
No information available at the time of writing, please refer to the CVE links below.
Solution:
Update packages.
CVEs:
CVE-2009-4067
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
CVE-2011-1160
The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, which allows local users to obtain potentially sensitive information from kernel memory via unspecified vectors.
The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, which allows local users to obtain potentially sensitive information from kernel memory via unspecified vectors.
CVE-2011-1585
The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user.
The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user.
CVE-2011-1833
Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel before 3.1 allows local users to bypass intended file permissions via a mount.ecryptfs_private mount with a mismatched uid.
Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel before 3.1 allows local users to bypass intended file permissions via a mount.ecryptfs_private mount with a mismatched uid.
CVE-2011-2484
The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application.
The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application.
CVE-2011-2496
Integer overflow in the vma_to_resize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (BUG_ON and system crash) via a crafted mremap system call that expands a memory mapping.
Integer overflow in the vma_to_resize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (BUG_ON and system crash) via a crafted mremap system call that expands a memory mapping.
CVE-2011-2695
Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service (BUG_ON and system crash) by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsigned integer.
Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service (BUG_ON and system crash) by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsigned integer.
CVE-2011-2699
The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets.
The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets.
CVE-2011-2723
The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.
The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.
CVE-2011-2942
A certain Red Hat patch to the __br_deliver function in net/bridge/br_forward.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging connectivity to a network interface that uses an Ethernet bridge device.
A certain Red Hat patch to the __br_deliver function in net/bridge/br_forward.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging connectivity to a network interface that uses an Ethernet bridge device.
CVE-2011-3131
Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock.
Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock.
CVE-2011-3188
The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.
The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.
CVE-2011-3191
Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large length value in a response to a read request for a directory.
Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large length value in a response to a read request for a directory.
CVE-2011-3209
The div_long_long_rem implementation in include/asm-x86/div64.h in the Linux kernel before 2.6.26 on the x86 platform allows local users to cause a denial of service (Divide Error Fault and panic) via a clock_gettime system call.
The div_long_long_rem implementation in include/asm-x86/div64.h in the Linux kernel before 2.6.26 on the x86 platform allows local users to cause a denial of service (Divide Error Fault and panic) via a clock_gettime system call.
CVE-2011-3347
A certain Red Hat patch to the be2net implementation in the kernel package before 2.6.32-218.el6 on Red Hat Enterprise Linux (RHEL) 6, when promiscuous mode is enabled, allows remote attackers to cause a denial of service (system crash) via non-member VLAN packets.
A certain Red Hat patch to the be2net implementation in the kernel package before 2.6.32-218.el6 on Red Hat Enterprise Linux (RHEL) 6, when promiscuous mode is enabled, allows remote attackers to cause a denial of service (system crash) via non-member VLAN packets.
Additional Info:
N/A
Download:
SRPMS
- kernel-2.6.18-274.3.AXS3.src.rpm
MD5: 6df703a594adf856ad150db53a889346
SHA-256: 2d61d1de9baecc0152dd05ff2841de01494a8acdee48298a9848bca8af60264d
Size: 63.27 MB
Asianux Server 3 for x86
- kernel-2.6.18-274.3.AXS3.i686.rpm
MD5: 1a18f4eef75d7609175e7f37c30d2251
SHA-256: 68b0e71622d48db65ff3e74e71b89b6aa9dabc24b1da9e7886befeaa1c863d95
Size: 18.74 MB - kernel-devel-2.6.18-274.3.AXS3.i686.rpm
MD5: 1089589c73f4fa7f4ca2a6d8629125a3
SHA-256: 9e235e0158fed9b3588b1b4c7717668db2f957a7e1c2c6e8f6c54d6b3db3059b
Size: 5.82 MB - kernel-PAE-2.6.18-274.3.AXS3.i686.rpm
MD5: 237b78b28e2e40ae0f7f109c0b2bcbbb
SHA-256: ecb74d231ffa6a9c63ce044652b9a5d4d1e46748f293fb3f5e84ff358444a975
Size: 18.76 MB - kernel-PAE-devel-2.6.18-274.3.AXS3.i686.rpm
MD5: 436e874574ab949a0d0a8fe02c919259
SHA-256: e1c91ad8445e4f388a2413b9b43314404f6210a6406feda62a2aaa3c8aee281e
Size: 5.83 MB - kernel-xen-2.6.18-274.3.AXS3.i686.rpm
MD5: b2acf3b5e428026d9919c5b9c8e52d2d
SHA-256: d136c7c3faff94b7832c7e404f857b1650dd3400e50aa725e482eed680a15153
Size: 19.91 MB - kernel-xen-devel-2.6.18-274.3.AXS3.i686.rpm
MD5: 3dda3fa68f14cac676acbbb7e8ee4ce5
SHA-256: 894daf0518990b0537bb136b255994120e4f2f6793e19d99298ee9f6a30cbcf8
Size: 5.83 MB - kernel-doc-2.6.18-274.3.AXS3.noarch.rpm
MD5: 9ccf90729e218bf2c6d062ca8ba380f9
SHA-256: d56c29a6f9f7c4ea3858625ce8805f2cd70f5f026ba5a7c94d5e3d064dd4e076
Size: 3.29 MB - kernel-headers-2.6.18-274.3.AXS3.i386.rpm
MD5: d85fd434a36e6b4604b7f13fde2d5d16
SHA-256: 45b33723d20537407ee036f99d2984729f83cbdb5a02a65a53c25463408b5257
Size: 1.26 MB
Asianux Server 3 for x86_64
- kernel-2.6.18-274.3.AXS3.x86_64.rpm
MD5: 7003bb40769b44238b6b0ad29b5ce6b7
SHA-256: b71d78d60a82d8d704081165897e0965b443d10acb88a522bbf91c2a607bf97d
Size: 20.84 MB - kernel-devel-2.6.18-274.3.AXS3.x86_64.rpm
MD5: e6685759b2d26dfafa4a7b711e6c89ad
SHA-256: b59ea38412742f2e27cac7cc462180c26f95a2702fdf9b5d44fd3b4a5a5a4e67
Size: 5.83 MB - kernel-headers-2.6.18-274.3.AXS3.x86_64.rpm
MD5: 1d5d385ef21fc28af7e7dc60ca51f8db
SHA-256: 3997d8f81b9953a127ee5d51aa866f5d0b25c71d84c2a514568679adac9a82e1
Size: 1.30 MB - kernel-xen-2.6.18-274.3.AXS3.x86_64.rpm
MD5: bd7e444f27e04444d3e49ab80d7571b5
SHA-256: eccc3f2c361de802ce31830023d613cc0ac260e18c5689d9055f521c8fda91d0
Size: 21.75 MB - kernel-xen-devel-2.6.18-274.3.AXS3.x86_64.rpm
MD5: 5963afc273e29b34781aad110dea98c7
SHA-256: 53324aac82bfb82c6d4549cec3784be20de0ab15f0d2f31854a72fc0464b7e21
Size: 5.83 MB - kernel-doc-2.6.18-274.3.AXS3.noarch.rpm
MD5: 930c442f46a09cb96442fafb66bf41e3
SHA-256: 53b5f123c8d9a569805f4506607ab40e1f1f8a6d27033bab7fc46ea3f03fe62d
Size: 3.29 MB
日本語