Synopsis:    Important: kernel security and bug fix update
Issue Date:  2012-05-29
CVE Numbers: CVE-2012-2136


The kernel packages contain the Linux kernel, the core of any Linux
operating system.

This update fixes the following security issue:

* It was found that the data_len parameter of the sock_alloc_send_pskb()
function in the Linux kernel's networking implementation was not validated
before use. A local user with access to a TUN/TAP virtual interface could
use this flaw to crash the system or, potentially, escalate their
privileges. Note that unprivileged users cannot access TUN/TAP devices
until the root user grants them access. (CVE-2012-2136, Important)

We have also posted updated kernel-module-* packages corresponding to
this kernel version.

The system must be rebooted for this update to take effect.

SL5:
  i386
     kernel-2.6.18-308.8.1.el5.i686.rpm
     kernel-debug-2.6.18-308.8.1.el5.i686.rpm
     kernel-debug-debuginfo-2.6.18-308.8.1.el5.i686.rpm
     kernel-debug-devel-2.6.18-308.8.1.el5.i686.rpm
     kernel-debuginfo-2.6.18-308.8.1.el5.i686.rpm
     kernel-debuginfo-common-2.6.18-308.8.1.el5.i686.rpm
     kernel-devel-2.6.18-308.8.1.el5.i686.rpm
     kernel-headers-2.6.18-308.8.1.el5.i386.rpm
     kernel-PAE-2.6.18-308.8.1.el5.i686.rpm
     kernel-PAE-debuginfo-2.6.18-308.8.1.el5.i686.rpm
     kernel-PAE-devel-2.6.18-308.8.1.el5.i686.rpm
     kernel-xen-2.6.18-308.8.1.el5.i686.rpm
     kernel-xen-debuginfo-2.6.18-308.8.1.el5.i686.rpm
     kernel-xen-devel-2.6.18-308.8.1.el5.i686.rpm
  noarch
     kernel-doc-2.6.18-308.8.1.el5.noarch.rpm
  x86_64
     kernel-2.6.18-308.8.1.el5.x86_64.rpm
     kernel-debug-2.6.18-308.8.1.el5.x86_64.rpm
     kernel-debug-debuginfo-2.6.18-308.8.1.el5.x86_64.rpm
     kernel-debug-devel-2.6.18-308.8.1.el5.x86_64.rpm
     kernel-debuginfo-2.6.18-308.8.1.el5.x86_64.rpm
     kernel-debuginfo-common-2.6.18-308.8.1.el5.x86_64.rpm
     kernel-devel-2.6.18-308.8.1.el5.x86_64.rpm
     kernel-headers-2.6.18-308.8.1.el5.x86_64.rpm
     kernel-xen-2.6.18-308.8.1.el5.x86_64.rpm
     kernel-xen-debuginfo-2.6.18-308.8.1.el5.x86_64.rpm
     kernel-xen-devel-2.6.18-308.8.1.el5.x86_64.rpm

- Scientific Linux Development Team