huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2013-3222: Kernel: atm: update msg_namelen in vcc_recvmsg()
Component: Kernel
Severity: Low
Public date: 2013-04-07T00:00:00+00:00

The vcc_recvmsg function in net/atm/common.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

Statement: This issue affects the versions of the Linux kernel as shipped with
Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2. Future kernel
updates for Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2 may
address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.9
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 9b3e617f3df53822345a8573b6d358f6b9e5ed87
CVE-2013-3224: Kernel: Bluetooth: possible info leak in bt_sock_recvmsg()
Component: Kernel
Severity: Low
Public date: 2013-04-07T00:00:00+00:00

The bt_sock_recvmsg function in net/bluetooth/af_bluetooth.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

Statement: This issue affects the versions of the Linux kernel as shipped with
Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2. Future kernel
updates for Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2 may
address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.9
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 4683f42fde3977bdb4e8a09622788cc8b5313778
CVE-2013-3225: Kernel: Bluetooth: RFCOMM - missing msg_namelen update in rfcomm_sock_recvmsg
Component: Kernel
Severity: Low
Public date: 2013-04-07T00:00:00+00:00

The rfcomm_sock_recvmsg function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

Statement: This issue does not affect the version of the kernel package as shipped with
Red Hat Enterprise Linux 5.

This issue affects the versions of Linux kernel as shipped with
Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2. Future kernel updates
for Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2 may address this
issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.9
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: e11e0455c0d7d3d62276a0c55d9dfbc16779d691
CVE-2013-3231: Kernel: llc: Fix missing msg_namelen update in llc_ui_recvmsg
Component: Kernel
Severity: Low
Public date: 2013-04-07T00:00:00+00:00

The llc_ui_recvmsg function in net/llc/af_llc.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

Statement: This issue affects the versions of the Linux kernel as shipped with
Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2. Future kernel
updates for Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2 may
address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.9
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: c77a4b9cffb6215a15196ec499490d116dfad181
CVE-2013-3235: Kernel: tipc: info leaks via msg_name in recv_msg/recv_stream
Component: Kernel
Severity: Low
Public date: 2013-04-07T00:00:00+00:00

net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure and a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

Statement: This issue does not affect the versions of Linux kernel as shipped with
Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2.

This issue affects the version of the kernel package as shipped with
Red Hat Enterprise Linux 5. Future kernel updates for Red Hat Enterprise Linux 5
may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.9
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 60085c3d009b0df252547adb336d1ccca5ce52ec
CVE-2013-3301: Kernel: tracing: NULL pointer dereference
Component: Kernel
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2013-04-11T00:00:00+00:00

The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the CAP_SYS_ADMIN capability for write access to the (1) set_ftrace_pid or (2) set_graph_function file, and then making an lseek system call.

Statement: This issue does not affect the version of the kernel package as shipped with
Red Hat Enterprise Linux 5.

This issue affects the versions of Linux kernel as shipped with
Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2. Future kernel updates
for Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2 may address this
issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.9
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 6a76f8c0ab19f215af2a3442870eeb5f0e81998d
CVE-2013-4113: php: xml_parse_into_struct buffer overflow when parsing deeply nested XML
Component: php
Severity: Critical
Public date: 2013-07-11T00:00:00+00:00

ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted document that is processed by the xml_parse_into_struct function.

Statement: This issue does not affect the version of php54 as shipped with Red Hat Software Collections 1.

Affected upstream versions: n/a
Fixed upstream versions: php-5.3.28
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 7d163e8a0880ae8af2dd869071393e5dc07ef271
CVE-2013-4130: spice: unsafe clients ring access abort
Component: spice
Severity: Moderate
Public date: 2013-07-05T00:00:00+00:00

The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not properly perform ring loops, which might allow remote attackers to cause a denial of service (reachable assertion and server exit) by triggering a network error.


Affected upstream versions: n/a
Fixed upstream versions: v0.12.4
Upstream repository: https://cgit.freedesktop.org/spice/spice
Upstream fix commit: 53488f0275d6c8a121af49f7ac817d09ce68090d
CVE-2013-4136: rubygem-passenger: insecure temporary directory usage due to reuse of existing server instance directories
Component: rubygem-passenger
Severity: Moderate
Public date: 2013-06-20T00:00:00+00:00

ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a symlink attack on a directory with a predictable name in /tmp/.


Affected upstream versions: n/a
Fixed upstream versions: release-4.0.6
Upstream repository: https://github.com/phusion/passenger
Upstream fix commit: 5483b3292cc2af1c83033eaaadec20dba4dcfd9b
CVE-2013-4148: qemu: virtio-net: buffer overflow on invalid state load
Component: qemu
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2013-12-03T00:00:00+00:00

Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow.

Statement: This issue does not affect the versions of kvm package as shipped with
Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: v2.1.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: 71f7fe48e10a8437c9d42d859389f37157f59980
CVE-2013-4149: qemu: virtio-net: out-of-bounds buffer write on load
Component: qemu
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
Public date: 2013-12-03T00:00:00+00:00

Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x before 1.7.2 might allow remote attackers to execute arbitrary code via a large MAC table.

Statement: This issue does not affect the versions of kvm package as shipped with
Red Hat Enterprise Linux 5.

This issue does not affect the versions of qemu-kvm package as shipped
with Red Hat Enterprise Linux 6.

Affected upstream versions: n/a
Fixed upstream versions: v2.1.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: 98f93ddd84800f207889491e0b5d851386b459cf
CVE-2013-4150: qemu: virtio-net: out-of-bounds buffer write on invalid state load
Component: qemu
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
Public date: 2013-12-03T00:00:00+00:00

The virtio_net_load function in hw/net/virtio-net.c in QEMU 1.5.0 through 1.7.x before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors in which the value of curr_queues is greater than max_queues, which triggers an out-of-bounds write.

Statement: This issue does not affect the versions of kvm package as shipped with
Red Hat Enterprise Linux 5.

This issue does not affect the versions of qemu-kvm package as shipped
with Red Hat Enterprise Linux 6.

Affected upstream versions: n/a
Fixed upstream versions: v2.1.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: eea750a5623ddac7a61982eec8f1c93481857578
CVE-2013-4151: qemu: virtio: out-of-bounds buffer write on invalid state load
Component: qemu
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
Public date: 2013-12-03T00:00:00+00:00

The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds write.


Affected upstream versions: n/a
Fixed upstream versions: v2.1.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: cc45995294b92d95319b4782750a3580cabdbc0c
CVE-2013-4162: Kernel: net: panic while pushing pending data out of a IPv6 socket with UDP_CORK enabled
Component: Kernel
Severity: Moderate
Public date: 2013-07-01T00:00:00+00:00

The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call.

Statement: This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 6 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.11
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 8822b64a0fa64a5dd1dfcf837c5b0be83f8c05d1
CVE-2013-4163: Kernel: net: panic while appending data to a corked IPv6 socket in ip6_append_data_mtu
Component: Kernel
Severity: Moderate
Public date: 2013-07-01T00:00:00+00:00

The ip6_append_data_mtu function in net/ipv6/ip6_output.c in the IPv6 implementation in the Linux kernel through 3.10.3 does not properly maintain information about whether the IPV6_MTU setsockopt option had been specified, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call.

Statement: This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.

This issue affects the version of the kernel package as shipped with Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise MRG 2 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.11
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 75a493e60ac4bbe2e977e7129d6d8cbb0dd236be
CVE-2013-4166: evolution: incorrect selection of recipient gpg public key for encrypted mail
Component: evolution
Severity: Low
CWE: CWE-697 (Incorrect Comparison)
Public date: 2013-07-22T00:00:00+00:00

The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG key to use for email encryption, which might cause the email to be encrypted with the wrong key and allow remote attackers to obtain sensitive information.

Statement: Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: 3.8.4 and earlier, 3.9.5 and earlier
Fixed upstream versions: EVOLUTION_DATA_SERVER_3_8_4
Upstream repository: https://git.gnome.org/browse/evolution-data-server
Upstream fix commit: f7059bb37dcce485d36d769142ec9515708d8ae5
CVE-2013-4236: vdsm: incomplete fix for CVE-2013-0167 issue
Component: vdsm
Severity: Moderate
Public date: 2013-07-16T00:00:00+00:00

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response.  NOTE: this issue is due to an incomplete fix for CVE-2013-0167.


Affected upstream versions: n/a
Upstream repository: https://gerrit.ovirt.org/vdsm.git
Upstream fix commit: 5fe1615b7949999fc9abd896bde63bf24f8431d6
CVE-2013-4237: glibc: Buffer overwrite when using readdir_r on file systems returning file names longer than NAME_MAX characters
Component: glibc
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
Public date: 2013-08-11T00:00:00+00:00

An out-of-bounds write flaw was found in the way the glibc's readdir_r() function handled file system entries longer than the NAME_MAX character constant. A remote attacker could provide a specially crafted NTFS or CIFS file system that, when processed by an application using readdir_r(), would cause that application to crash or, potentially, allow the attacker to execute arbitrary code with the privileges of the user running the application.

Statement: This issue affects the versions of glibc as shipped with Red Hat Enterprise Linux 5. This issue is not planned to be fixed in Red Hat Enterprise Linux 5 as it is now in Production 3 Phase of the support and maintenance life cycle, https://access.redhat.com/support/policy/updates/errata/

Affected upstream versions: n/a
Fixed upstream versions: glibc-2.19
Upstream repository: https://sourceware.org/git/glibc.git
Upstream fix commit: 91ce40854d0b7f865cf5024ef95a8026b76096f3
CVE-2013-4244: (gif2tiff): OOB Write in LZW decompressor
Component: (gif2tiff)
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
Public date: 2013-08-14T00:00:00+00:00

The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted GIF image.


Affected upstream versions: n/a
Fixed upstream versions: Release-v4-0-4
Upstream repository: https://github.com/vadz/libtiff
Upstream fix commit: ce6841d9e41d621ba23cf18b190ee6a23b2cc833
CVE-2013-4248: php: hostname check bypassing vulnerability in SSL client
Component: php
Severity: Moderate
Public date: 2013-08-13T00:00:00+00:00

The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Statement: This issue does not affect the version of php as shipped with Red Hat Enterprise Linux 5 or the version of php54 as shipped with Red Hat Software Collections 1.

Affected upstream versions: n/a
Fixed upstream versions: php-5.4.20
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 2874696a5a8d46639d261571f915c493cd875897
CVE-2013-4270: kernel: net: permissions flaw in /proc/sys/net
Component: kernel
Severity: Moderate
Public date: 2013-10-06T00:00:00+00:00

The net_ctl_permissions function in net/sysctl_net.c in the Linux kernel before 3.11.5 does not properly determine uid and gid values, which allows local users to bypass intended /proc/sys/net restrictions via a crafted application.

Statement: This issue does not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5 and 6.

Affected upstream versions: n/a
Fixed upstream versions: v3.12
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 2433c8f094a008895e66f25bd1773cdb01c91d01
CVE-2013-4282: spice: stack buffer overflow in reds_handle_ticket() function
Component: spice
Severity: Important
CWE: CWE-121 (Stack-based Buffer Overflow)
Public date: 2013-10-29T00:00:00+00:00

Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.


Affected upstream versions: n/a
Fixed upstream versions: v0.12.5
Upstream repository: https://cgit.freedesktop.org/spice/spice
Upstream fix commit: 8af619009660b24e0b41ad26b30289eea288fcc2
CVE-2013-4296: libvirt: invalid free in remoteDispatchDomainMemoryStats
Component: libvirt
Severity: Moderate
Public date: 2013-09-18T00:00:00+00:00

The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10.2.8, 1.0.x before 1.0.5.6, and 1.1.x before 1.1.2 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via a crafted RPC call.


Affected upstream versions: n/a
Fixed upstream versions: v1.1.3
Upstream repository: https://libvirt.org/git/libvirt.git
Upstream fix commit: e7f400a110e2e3673b96518170bfea0855dd82c0
CVE-2013-4299: kernel: dm: dm-snapshot data leak
Component: kernel
Severity: Moderate
Public date: 2013-10-16T00:00:00+00:00

Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device.


Affected upstream versions: n/a
Fixed upstream versions: v3.12
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: e9c6a182649f4259db704ae15a91ac820e63b0ca
CVE-2013-4312: kernel: File descriptors passed over unix sockets are not properly accounted
Component: kernel
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
Public date: 2016-01-19T00:00:00+00:00

It was found that the Linux kernel did not properly account file descriptors passed over the unix socket against the process limit. A local user could use this flaw to exhaust all available memory on the system.

Statement: This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7, and MRG-2. Future Linux kernel updates for the respective releases might address this issue.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v4.5
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 712f4aad406bb1ed67f3f98d04c044191f0ff593
CVE-2013-4348: kernel: net: deadloop path in skb_flow_dissect()
Component: kernel
Severity: Important
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
Public date: 2013-10-31T00:00:00+00:00

The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation.

Statement: This issue does not affect Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6. Future Linux kernel updates for Red Hat Enterprise Linux MRG 2 might address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.13
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/davem/net.git
Upstream fix commit: 6f092343855a71e03b8d209815d8c45bf3a27fcd
CVE-2013-4350: kernel: net: sctp: ipv6 ipsec encryption bug in sctp_v6_xmit
Component: kernel
Severity: Moderate
Public date: 2010-12-06T00:00:00+00:00

The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec encryption, which allows remote attackers to obtain sensitive information by sniffing the network.

Statement: The risks associated with fixing this bug in Red Hat Enterprise Linux 5 and 6 are greater than its security impact. This issue is not currently planned to be addressed in future kernel updates for Red Hat Enterprise Linux 5 and 6.

Affected upstream versions: n/a
Fixed upstream versions: v3.12
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 95ee62083cb6453e056562d91f597552021e6ae7
CVE-2013-4353: openssl: client NULL dereference crash on malformed handshake packets
Component: openssl
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2014-01-06T00:00:00+00:00

The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake.

Statement: This issue did not affect the versions of openssl as shipped with Red Hat Enterprise Linux 5 and earlier.

Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_0_1f
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: 197e0ea817ad64820789d86711d55ff50d71f631
CVE-2013-4387: Kernel: net: IPv6: panic when UFO=On for an interface
Component: Kernel
Severity: Important
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2013-09-21T00:00:00+00:00

net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.

Statement: This issue does not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5.

This issue affects the versions of Linux kernel as shipped with Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.12
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 2811ebac2521ceac84f2bdae402455baa6a7fb47