Solution
Please Install the Updated Packages.
Insight
The kernel packages contain the Linux kernel, the core of any Linux operating system.
This update fixes the following security issues:
* A NULL pointer dereference flaw was found in the nf_ct_frag6_reasm() function in the Linux kernel's netfilter IPv6 connection tracking implementation. A remote attacker could use this flaw to send specially-crafted packets to a target system that is using IPv6 and also has the nf_conntrack_ipv6 kernel module loaded, causing it to crash.
(CVE-2012-2744, Important)
* A flaw was found in the way the Linux kernel's key management facility handled replacement session keyrings on process forks. A local, unprivileged user could use this flaw to cause a denial of service.
(CVE-2012-2745, Moderate)
Red Hat would like to thank an anonymous contributor working with the Beyond Security SecuriTeam Secure Disclosure program for reporting CVE-2012-2744.
This update also fixes the following bugs:
* Previously introduced firmware files required for new Realtek chipsets contained an invalid prefix ("
rtl_nic_"
) in the file names, for example
"
/lib/firmware/rtl_nic/rtl_nic_rtl8168d-1.fw"
. This update corrects these
file names. For example, the aforementioned file is now correctly named "
/lib/firmware/rtl_nic/rtl8168d-1.fw"
. (BZ#832359)
* This update blacklists the ADMA428M revision of the 2GB ATA Flash Disk device. This is due to data corruption occurring on the said device when the Ultra-DMA 66 transfer mode is used. When the
"
libata.force=5:pio0,6:pio0"
kernel parameter is set, the aforementioned
device works as expected. (BZ#832363)
* On Red Hat Enterprise Linux 6, mounting an NFS export from a server running Windows Server 2012 Release Candidate returned the NFS4ERR_MINOR_VERS_MISMATCH error because Windows Server 2012 Release Candidate supports NFSv4.1 only. Red Hat Enterprise Linux 6 did not properly handle the returned error and did not fall back to using NFSv3, which caused the mount operation to fail. With this update, when the NFS4ERR_MINOR_VERS_MISMATCH error is returned, the mount operation properly falls back to using NFSv3 and no longer fails. (BZ#832365)
* On ext4 file systems, when fallocate() failed to allocate blocks due to the ENOSPC condition (no space left on device) for a file larger than 4 GB, the size of the file became corrupted and, consequently, caused file system corruption. This was due to a missing cast operator in the "
ext4_fallocate()"
function. With this update, the underlying source code has b ...
Description truncated, for more information please check the Reference URL
Affected
kernel on CentOS 6
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2012-2744, CVE-2012-2745 -
CVSS Base Score: 7.8
AV:N/AC:L/Au:N/C:N/I:N/A:C
Related Vulnerabilities