Synopsis: Moderate: kernel security and bug fix update Issue Date: 2013-02-05 CVE Numbers: CVE-2012-4398 CVE-2012-4461 CVE-2012-4530 -- This update fixes the following security issues: * It was found that a deadlock could occur in the Out of Memory (OOM) killer. A process could trigger this deadlock by consuming a large amount of memory, and then causing request_module() to be called. A local, unprivileged user could use this flaw to cause a denial of service (excessive memory consumption). (CVE-2012-4398, Moderate) * A flaw was found in the way the KVM (Kernel-based Virtual Machine) subsystem handled guests attempting to run with the X86_CR4_OSXSAVE CPU feature flag set. On hosts without the XSAVE CPU feature, a local, unprivileged user could use this flaw to crash the host system. (The "grep --color xsave /proc/cpuinfo" command can be used to verify if your system has the XSAVE CPU feature.) (CVE-2012-4461, Moderate) * A memory disclosure flaw was found in the way the load_script() function in the binfmt_script binary format handler handled excessive recursions. A local, unprivileged user could use this flaw to leak kernel stack memory to user-space by executing specially-crafted scripts. (CVE-2012-4530, Low) The system must be rebooted for this update to take effect. -- SL6 x86_64 kernel-2.6.32-279.22.1.el6.x86_64.rpm kernel-debug-2.6.32-279.22.1.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-279.22.1.el6.x86_64.rpm kernel-debug-devel-2.6.32-279.22.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-279.22.1.el6.x86_64.rpm kernel-debuginfo-common-x86_64-2.6.32-279.22.1.el6.x86_64.rpm kernel-devel-2.6.32-279.22.1.el6.x86_64.rpm kernel-headers-2.6.32-279.22.1.el6.x86_64.rpm perf-2.6.32-279.22.1.el6.x86_64.rpm perf-debuginfo-2.6.32-279.22.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-279.22.1.el6.x86_64.rpm python-perf-2.6.32-279.22.1.el6.x86_64.rpm i386 kernel-2.6.32-279.22.1.el6.i686.rpm kernel-debug-2.6.32-279.22.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-279.22.1.el6.i686.rpm kernel-debug-devel-2.6.32-279.22.1.el6.i686.rpm kernel-debuginfo-2.6.32-279.22.1.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-279.22.1.el6.i686.rpm kernel-devel-2.6.32-279.22.1.el6.i686.rpm kernel-headers-2.6.32-279.22.1.el6.i686.rpm perf-2.6.32-279.22.1.el6.i686.rpm perf-debuginfo-2.6.32-279.22.1.el6.i686.rpm python-perf-debuginfo-2.6.32-279.22.1.el6.i686.rpm python-perf-2.6.32-279.22.1.el6.i686.rpm noarch kernel-doc-2.6.32-279.22.1.el6.noarch.rpm kernel-firmware-2.6.32-279.22.1.el6.noarch.rpm - Scientific Linux Development Team