Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Fedora Local Security Checks >> Fedora Core 1 2003-026: kernel


Vulnerability Assessment Details

Fedora Core 1 2003-026: kernel

Vulnerability Assessment Summary
Check for the version of the kernel package

Detailed Explanation for this Vulnerability Assessment

The remote host is missing the patch for the advisory FEDORA-2003-026 (kernel).

The kernel package contains the Linux kernel (vmlinuz), the core of your
Red Hat Linux operating system. The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.


The kernel shipped with Fedora Core 1 was vulnerable to a bug in the
error return on a concurrent fork() with threaded exit() which could be
exploited by a user level program to crash the kernel.

In addition to this bug fix, the changelog below details various
other non security fixes that have been added.

* Mon Dec 01 2003 Dave Jones

- sys_tgkill wasn't enabled on IA32.

* Sun Nov 30 2003 Dave Jones

- Process scheduler fix.
When doing sync wakeups we must not skip the notification of other cpus if
the task is not on this runqueue.

* Wed Nov 26 2003 Justin M. Forbes <64bit_fedora@comcast.net>

- Merge required ia32 syscalls for AMD64
- [f]truncate64 for 32bit code fix

* Mon Nov 24 2003 Dave Jones

- Fix power-off on shutdown with ACPI.
- Add missing part of recent cmpci fix
- Drop CONFIG_NR_CPUS patch which was problematic.
- Fold futex-fix into main futex patch.
- Fix TG3 tqueue initialisation.
- Various NPTL fixes.

* Fri Nov 14 2003 Dave Jones

- Drop netfilter change which proved to be bad upstream.

* Thu Nov 13 2003 Justin M. Forbes <64bit_fedora@comcast.net>

- Fix NForce3 DMA and ATA133 on AMD64

* Wed Nov 12 2003 Dave Jones

- Fix syscall definitions on AMD64

* Tue Nov 11 2003 Dave Jones

- Fix Intel 440GX Interrupt routing.
- Fix waitqueue leak in cmpci driver.

* Mon Nov 10 2003 Dave Jones

- Kill noisy warnings in the DRM modules.
- Merge munged upstream x86-64.org patch for various AMD64 fixes.

* Mon Nov 03 2003 Dave Jones

- Further cleanups related to AMD64 build.

* Fri Oct 31 2003 Dave Jones

- Make AMD64 build.



Solution : http://www.fedoranews.org/updates/FEDORA-2003-026.shtml
Network Security Threat Level: High

Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security

Cables, Connectors

SanDisk Ultra II 960GB SATA III 2.5-Inch 7mm Height Solid State Drive (SSD) NEW
$259.0
SanDisk Ultra II 960GB SATA III 2.5-Inch 7mm Height Solid State Drive (SSD) NEW pictureWd black 2 dual drive
$220.0
Wd black 2 dual drive picture6-Bay 2.5/3.5 inch SSD/HDD Hard Drive Protective Storage Carrying Box Aluminum
$49.99
6-Bay 2.5/3.5 inch SSD/HDD Hard Drive Protective Storage Carrying Box Aluminum pictureSanDisk - 240GB Internal SATA Solid State Drive Plus for Laptops
$75.0
SanDisk - 240GB Internal SATA Solid State Drive Plus for Laptops picture


Discussions

No Discussions have been posted on this vulnerability.