Download/kernel/rhel5-testing/028stab119.1/changes

Changes

Since 028stab118.1:

• It was found that the Linux kernel's implementation of vectored pipe read and write functionality did not take into account the I/O vectors that were already processed when retrying after a failed atomic access operation, potentially resulting in memory corruption due to an I/O vector array overrun. A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system.

See also

• RHSA-2015-1042
• CVE-2015-1805