MGASA-2014-0039

Description

Updated kernel package fixes a critical security issue This kernel update provides an update to 3.12.9 and fixes the following critical security issue: Pageexec reported a bug in the Linux kernel's recvmmsg syscall when called from code using the x32 ABI. An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or gain administrator privileges (CVE-2014-0038) It also fixes an issue where some laptops are forced to use vesa driver & No ACPI (mga#6077) For other changes, see the referenced changelog.

Affected Systems

• mageia•kernel

  < 3.12.9-1.mga4

• mageia•kernel-userspace-headers

  < 3.12.9-1.mga4

• mageia•kmod-broadcom-wl

  < 6.30.223.141-25.mga4.nonfree

• mageia•kmod-fglrx

  < 13.251-10.mga4.nonfree

• mageia•kmod-nvidia-current

  < 325.15-7.mga4.nonfree

• mageia•kmod-nvidia173

  < 173.14.39-11.mga4.nonfree

• mageia•kmod-nvidia304

  < 304.119-3.mga4.nonfree

• mageia•kmod-vboxadditions

  < 4.3.6-9.mga4

• mageia•kmod-virtualbox

  < 4.3.6-9.mga4

• mageia•kmod-xtables-addons

  < 2.3-41.mga4

References (4)

• https://advisories.mageia.org/MGASA-2014-0039.html
• https://bugs.mageia.org/show_bug.cgi?id=6077
• https://bugs.mageia.org/show_bug.cgi?id=12522
• https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.9