Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

CentOS Update for kernel CESA-2009:1455 centos5 i386

Information

Severity

Severity

Medium

Family

Family

CentOS Local Security Checks

CVSSv2 Base

CVSSv2 Base

4.7

CVSSv2 Vector

CVSSv2 Vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Solution Type

Solution Type

Vendor Patch

Created

Created

12 years ago

Modified

Modified

5 years ago

Summary

The remote host is missing an update for the 'kernel' package(s) announced via the referenced advisory.

Insight

Insight

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fix: * a NULL pointer dereference flaw was found in the Multiple Devices (md) driver in the Linux kernel. If the 'suspend_lo' or 'suspend_hi' file on the sysfs file system ('/sys/') is modified when the disk array is inactive, it could lead to a local denial of service or privilege escalation. Note: By default, only the root user can write to the files mentioned above. (CVE-2009-2849, Moderate) Bug fixes: * a bug in nlm_lookup_host() could lead to un-reclaimed locks on file systems, resulting in umount failing and NFS service relocation issues for clusters. (BZ#517967) * a bug in the sky2 driver prevented the phy from being reset properly on some hardware when it hanged, preventing a link from coming back up. (BZ#517976) * disabling MSI-X for qla2xxx also disabled MSI interrupts. (BZ#519782) * performance issues with reads when using the qlge driver on PowerPC systems. A system hang could also occur during reboot. (BZ#519783) * unreliable time keeping for Red Hat Enterprise Linux virtual machines. The KVM pvclock code is now used to detect/correct lost ticks. (BZ#520685) * /proc/cpuinfo was missing flags for new features in supported processors, possibly preventing the operating system and applications from getting the best performance. (BZ#520686) * reading/writing with a serial loopback device on a certain IBM system did not work unless booted with 'pnpacpi=off'. (BZ#520905) * mlx4_core failed to load on systems with more than 32 CPUs. (BZ#520906) * on big-endian platforms, interfaces using the mlx4_en driver and Large Receive Offload (LRO) did not handle VLAN traffic properly (a segmentation fault in the VLAN stack in the kernel occurred). (BZ#520908) * due to a lock being held for a long time, some systems may have experienced 'BUG: soft lockup' messages under very heavy load. (BZ#520919) * incorrect APIC timer calibration may have caused a system hang during boot, as well as the system time becoming faster or slower. A warning is now provided. (BZ#521238) * a Fibre Channel device re-scan via 'echo '---' > /sys/class/scsi_host/ host[x]/scan' may not complete after hot adding a drive, leading to soft lockups ('BUG: soft lockup detected'). (BZ#521239) * the Broadcom BCM5761 network device was unable to be initialized properly, therefore, the associated interface could not obtain an IP address via DHCP, ... Description truncated, please see the referenced URL(s) for more information.

Affected Software

Affected Software

kernel on CentOS 5

Solution

Solution

Please install the updated packages.

Common Vulnerabilities and Exposures (CVE)