huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2009-1385: kernel: e1000_clean_rx_irq() denial of service
Component: kernel
Severity: Important
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Public date: 2007-04-25T00:00:00+00:00

Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000) before 7.5.5 allows remote attackers to cause a denial of service (panic) via a crafted frame size.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.30
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: ea30e11970a96cfe5e32c03a29332554573b4a10
CVE-2009-1389: kernel: r8169: fix crash when large packets are received
Component: kernel
Severity: Important
Public date: 2009-02-14T00:00:00+00:00

Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.30
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: fdd7b4c3302c93f6833e338903ea77245eb510b4
CVE-2009-1439: kernel: cifs: memory overwrite when saving nativeFileSystem field during mount
Component: kernel
Severity: Important
CWE: CWE-787 (Out-of-bounds Write)
Public date: 2009-03-26T00:00:00+00:00

Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.30
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: b363b3304bcf68c4541683b2eff70b29f0446a5b
CVE-2009-1570: Gimp: Integer overflow in the BMP image file plugin
Component: Gimp
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2009-11-12T00:00:00+00:00

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.


Affected upstream versions: n/a
Upstream repository: https://git.gnome.org/cgit/gimp
Upstream fix commit: df2b0aca2e7cdb95ebfd3454c65aaba0a83e9bbe
CVE-2009-1633: kernel: cifs: fix potential buffer overruns when converting unicode strings sent by server
Component: kernel
Severity: Important
CWE: CWE-131 (Incorrect Calculation of Buffer Size)
Public date: 2009-04-14T00:00:00+00:00

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service (memory corruption) and possibly have unspecified other impact via (1) a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or (2) long Unicode characters, related to fs/cifs/cifssmb.c and the cifs_readdir function in fs/cifs/readdir.c.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, and 3.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.30
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 27b87fe52baba0a55e9723030e76fce94fabcea4
CVE-2009-1895: kernel: personality: fix PER_CLEAR_ON_SETID
Component: kernel
Severity: Important
Public date: 2009-06-26T00:00:00+00:00

The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to (1) conduct NULL pointer dereference attacks, (2) bypass the mmap_min_addr protection mechanism, or (3) defeat address space layout randomization (ASLR).


Affected upstream versions: n/a
Fixed upstream versions: v2.6.31
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: f9fabcb58a6d26d6efde842d1703ac7cfa9427b6
CVE-2009-1932: gstreamer-plugins-good: PNG decoder integer overflow
Component: gstreamer-plugins-good
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2009-06-03T00:00:00+00:00

Multiple integer overflows in the (1) user_info_callback, (2) user_endrow_callback, and (3) gst_pngdec_task functions (ext/libpng/gstpngdec.c) in GStreamer Good Plug-ins (aka gst-plugins-good or gstreamer-plugins-good) 0.10.15 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PNG file, which triggers a buffer overflow.


Affected upstream versions: n/a
Fixed upstream versions: RELEASE-0.10.16
Upstream repository: https://cgit.freedesktop.org/gstreamer/gst-plugins-good
Upstream fix commit: d9544bcc44adcef769cbdf7f6453e140058a3adc
CVE-2009-1961: kernel: splice local denial of service
Component: kernel
Severity: Moderate
Public date: 2009-04-06T00:00:00+00:00

The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.

Statement: This issue does not affect versions of Linux kernel as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise Linux MRG 2.

This issue was fixed in Red Hat Enterprise Linux MRG 1 via https://rhn.redhat.com/errata/RHSA-2009-1157.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.30
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 7bfac9ecf0585962fe13584f5cf526d8c8e76f17
CVE-2009-2406: kernel: ecryptfs stack overflow in parse_tag_11_packet()
Component: kernel
Severity: Important
CWE: CWE-805 (Buffer Access with Incorrect Length Value)
Public date: 2009-07-28T00:00:00+00:00

Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to not ensuring that the key signature length in a Tag 11 packet is compatible with the key signature buffer size.

Statement: The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG did not include support for eCryptfs, and therefore are not affected by this issue.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.31
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 6352a29305373ae6196491e6d4669f301e26492e
CVE-2009-2407: kernel: ecryptfs heap overflow in parse_tag_3_packet()
Component: kernel
Severity: Important
CWE: CWE-787 (Out-of-bounds Write)
Public date: 2009-07-28T00:00:00+00:00

Heap-based buffer overflow in the parse_tag_3_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to a large encrypted key size in a Tag 3 packet.

Statement: The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG did not include support for eCryptfs, and therefore are not affected by this issue.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.31
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: f151cd2c54ddc7714e2f740681350476cda03a28
CVE-2009-2414: mingw32-libxml2: Stack overflow by parsing root XML element DTD definition
Component: mingw32-libxml2
Severity: Moderate
Public date: 2009-08-10T00:00:00+00:00

Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows context-dependent attackers to cause a denial of service (application crash) via a large depth of element declarations in a DTD, related to a function recursion, as demonstrated by the Codenomicon XML fuzzing framework.


Affected upstream versions: n/a
Fixed upstream versions: v2.7.4
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: 489f9671e71cc44a97b23111b3126ac8a1e21a59
CVE-2009-2416: mingw32-libxml2: Pointer use-after-free flaws by parsing Notation and Enumeration attribute types
Component: mingw32-libxml2
Severity: Low
CWE: CWE-416 (Use After Free)
Public date: 2009-08-10T00:00:00+00:00

Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework.


Affected upstream versions: n/a
Fixed upstream versions: v2.7.4
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: 489f9671e71cc44a97b23111b3126ac8a1e21a59
CVE-2009-2691: kernel: /proc/$pid/maps visible during initial setuid ELF loading
Component: kernel
Severity: Moderate
Public date: 2009-07-10T00:00:00+00:00

The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition.

Statement: We currently have no plans to fix this flaw in Red Hat Enterprise Linux 3, 4, and 5 as it is not possible to trigger the information leak if the suid_dumpable tunable is set to zero (which is the default).

Affected upstream versions: n/a
Fixed upstream versions: v2.6.31
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 00f89d218523b9bf6b522349c039d5ac80aa536d
CVE-2009-2692: kernel: uninit op in SOCKOPS_WRAP() leads to privesc
Component: kernel
Severity: Important
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2009-08-13T00:00:00+00:00

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.

Statement: Red Hat is aware of this issue. Please see https://access.redhat.com/articles/18053.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.31
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: e694958388c50148389b0e9b9e9e8945cf0f1b98
CVE-2009-2695: kernel: SELinux and mmap_min_addr
Component: kernel
Severity: Important
Public date: 2009-07-31T00:00:00+00:00

The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to (1) the default configuration of the allow_unconfined_mmap_low boolean in SELinux on Red Hat Enterprise Linux (RHEL) 5, (2) an error that causes allow_unconfined_mmap_low to be ignored in the unconfined_t domain, (3) lack of a requirement for the CAP_SYS_RAWIO capability for these mmap operations, and (4) interaction between the mmap_min_addr protection mechanism and certain application programs.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.32
Upstream repository: https://git.kernel.org/linux/kernel/git/jmorris/security-testing-2.6.git
Upstream fix commit: 84336d1a77ccd2c06a730ddd38e695c2324a7386
CVE-2009-2698: kernel: udp socket NULL ptr dereference
Component: kernel
Severity: Important
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2009-08-24T00:00:00+00:00

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise MRG.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.19
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 1e0c14f49d6b393179f423abbac47f85618d3d46
CVE-2009-2847: kernel: information leak in sigaltstack
Component: kernel
Severity: Moderate
Public date: 2009-07-31T00:00:00+00:00

The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function.

Statement: This issue is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important or critical impact are addressed. For further information about Errata Support Policy, visit: https://access.redhat.com/support/policy/updates/errata/

Affected upstream versions: n/a
Fixed upstream versions: v2.6.31
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 0083fc2c50e6c5127c2802ad323adf8143ab7856
CVE-2009-2849: kernel: md: NULL pointer deref when accessing suspend_* sysfs attributes
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2009-07-01T00:00:00+00:00

The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer dereference) via vectors related to "suspend_* sysfs attributes" and the (1) suspend_lo_store or (2) suspend_hi_store functions.  NOTE: this is only a vulnerability when sysfs is writable by an attacker.

Statement: The flaw was introduced in kernel version 2.6.17-rc1. The Linux kernel as shipped with Red Hat Enterprise Linux 3, and 4 are not affected by this issue.

A future kernel update for Red Hat Enterprise Linux 5 will address this flaw.

Affected upstream versions: n/a
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.30.y.git
Upstream fix commit: 3c92900d9a4afb176d3de335dc0da0198660a244
CVE-2009-2908: kernel ecryptfs NULL pointer dereference
Component: kernel ecryptfs NULL pointer dereference
Severity: Important
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2009-09-22T00:00:00+00:00

The d_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service (kernel OOPS) and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a Mutt temporary directory in an eCryptfs mount.

Statement: The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG do not include support for eCryptfs, and therefore are not affected by this issue.

Affected upstream versions: n/a
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.6.31.y.git
Upstream fix commit: afc2b6932f48f200736d3e36ad66fee0ec733136
CVE-2009-2910: kernel: x86_64 32 bit process register leak
Component: kernel
Severity: Moderate
Public date: 2009-10-01T00:00:00+00:00

arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode.

Statement: This issue is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important and critical impact are addressed.

For further information about Errata Support Policy, visit: https://access.redhat.com/support/policy/updates/errata/

Affected upstream versions: n/a
Fixed upstream versions: v2.6.32
Upstream repository: https://git.kernel.org/linux/kernel/git/x86/linux-2.6-tip.git
Upstream fix commit: 24e35800cdc4350fc34e2bed37b608a9e13ab3b6
CVE-2009-3002: kernel: numerous getname() infoleaks
Component: kernel
Severity: Important
Public date: 2009-08-23T00:00:00+00:00

The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c.

Statement: CVE-2009-3002 describes a collection of similar information leaks that affect numerous networking protocols.

The Linux kernel as shipped with Red Hat Enterprise Linux 4 and 5 did not enable support for the AppleTalk DDP protocol, and therefore were not affected by issue (1).

The Linux kernel as shipped with Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG did not enable support for IrDA sockets, and therefore were not affected by issue (2).

The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG did not enable support for the Acorn Econet and AUN protocols, and therefore were not affected by issue (3).

The Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG did not enable support for the NET/ROM and ROSE protocols, and therefore were not affected by issues (4) and (5).

The raw_getname() leak was introduced in the Linux kernel version 2.6.25-rc1. The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG therefore were not affected by issue (6).

Affected upstream versions: n/a
Fixed upstream versions: v2.6.31
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 3d392475c873c10c10d6d96b94d092a34ebd4791
CVE-2009-3080: kernel: gdth: Prevent negative offsets in ioctl
Component: kernel
Severity: Important
CWE: CWE-823 (Use of Out-of-range Pointer Offset)
Public date: 2009-11-20T00:00:00+00:00

Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.32
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 690e744869f3262855b83b4fb59199cf142765b0
CVE-2009-3111: FreeRADIUS: Missing check for Tunnel-Password attributes with zero length (DoS) -- re-appearance of CVE-2003-0967
Component: FreeRADIUS
Severity: Moderate
Public date: 2009-09-07T00:00:00+00:00

The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11.  NOTE: this is a regression error related to CVE-2003-0967.


Affected upstream versions: n/a
Fixed upstream versions: release_1_1_8
Upstream repository: https://github.com/alandekok/freeradius-server
Upstream fix commit: 860cad9e02ba344edb0038419e415fe05a9a01f4
CVE-2009-3228: kernel: tc: uninitialised kernel memory leak
Component: kernel
Severity: Moderate
CWE: CWE-401 (Missing Release of Memory after Effective Lifetime)
Public date: 2009-09-02T00:00:00+00:00

The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.31
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.4.37.y.git
Upstream fix commit: 096ed17f20affc2db0e307658c69b67433992a7a
CVE-2009-3238: kernel: random: add robust get_random_u32, remove weak get_random_int
Component: kernel
Severity: Important
CWE: CWE-330 (Use of Insufficiently Random Values)
Public date: 2009-05-05T00:00:00+00:00

The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms based on randomization, via vectors that leverage the function's tendency to "return the same value over and over again for long stretches of time."


Affected upstream versions: n/a
Fixed upstream versions: v2.6.30
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 8a0a9bd4db63bc45e3017bedeafbd88d0eb84d02
CVE-2009-3286: kernel: O_EXCL creates on NFSv4 are broken
Component: kernel
Severity: Important
Public date: 2009-09-09T00:00:00+00:00

NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the do_open_permission function even when a create fails.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.19
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 81ac95c5
CVE-2009-3290: kernel: KVM: x86: Disallow hypercalls for guest callers in rings > 0
Component: kernel
Severity: Important
CWE: CWE-648 (Incorrect Use of Privileged APIs)
Public date: 2009-08-03T00:00:00+00:00

The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service (guest kernel crash) and read or write guest kernel memory via unspecified "random addresses."

Statement: Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/CVE-2009-3290

This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG as KVM (Kernel-based Virtual Machine) is only supported in Red Hat Enterprise Linux 5. A future kernel update in Red Hat Enterprise Linux 5 will address this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.32
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 07708c4af1346ab1521b26a202f438366b7bcffd