* A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a #SS (stack segment) fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system.
(CVE-2014-9322, Important)

The system must be rebooted for this update to take effect.

From Red Hat Security Advisory 2014:2008 :

Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

* A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a #SS (stack segment) fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system.
(CVE-2014-9322, Important)

Red Hat would like to thank Andy Lutomirski for reporting this issue.

All kernel users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The system must be rebooted for this update to take effect.

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3106 advisory.

    - isofs: Fix unbounded recursion when processing relocated directories (Jan Kara)  [Orabug: 20224059]     {CVE-2014-5471} {CVE-2014-5472}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3107 advisory.

    - isofs: Fix unbounded recursion when processing relocated directories (Jan Kara)  [Orabug: 20224060]     {CVE-2014-5471} {CVE-2014-5472}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3108 advisory.

    - net: guard tcp_set_keepalive() to tcp sockets (Eric Dumazet)  [Orabug: 20224099]  {CVE-2012-6657}
    - isofs: Fix unbounded recursion when processing relocated directories (Jan Kara)  [Orabug: 20224061]     {CVE-2014-5471} {CVE-2014-5472}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:2028 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux     operating system.

    * A flaw was found in the way the Linux kernel handled GS segment register     base switching when recovering from a #SS (stack segment) fault on an     erroneous return to user space. A local, unprivileged user could use this     flaw to escalate their privileges on the system. (CVE-2014-9322, Important)

    Red Hat would like to thank Andy Lutomirski for reporting this issue.

    All kernel users are advised to upgrade to these updated packages, which     contain a backported patch to correct this issue. The system must be     rebooted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 5.9 Extended Update Support.

Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

* A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a #SS (stack segment) fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system.
(CVE-2014-9322, Important)

Red Hat would like to thank Andy Lutomirski for reporting this issue.

All kernel users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The system must be rebooted for this update to take effect.

ID	Name	Product	Family	Published	Updated	Severity
80100	Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20141217)	Nessus	Scientific Linux Local Security Checks	12/18/2014	1/14/2021	high
80110	Oracle Linux 5 : kernel (ELSA-2014-2008-1)	Nessus	Oracle Linux Local Security Checks	12/19/2014	1/14/2021	high
80156	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2014-3106)	Nessus	Oracle Linux Local Security Checks	12/22/2014	2/9/2026	high
80157	Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3107)	Nessus	Oracle Linux Local Security Checks	12/22/2014	2/9/2026	high
80158	Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3108)	Nessus	Oracle Linux Local Security Checks	12/22/2014	2/9/2026	high
80213	RHEL 6 : kernel (RHSA-2014:2028)	Nessus	Red Hat Local Security Checks	12/23/2014	4/15/2025	high
80214	RHEL 5 : kernel (RHSA-2014:2029)	Nessus	Red Hat Local Security Checks	12/23/2014	1/14/2021	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high