[Ksplice][RHEL 5 Updates] New updates available via Ksplice (RHSA-2010:0792-1)

[Greg Price]

Synopsis: RHSA-2010:0792-1 can now be patched using Ksplice
CVEs: CVE-2010-3904
Red Hat Security Advisory Severity: Important

Systems running Red Hat Enterprise Linux 5 and CentOS 5 can now use
Ksplice to patch against the latest Red Hat Security Advisory,
RHSA-2010:0792-1.

INSTALLING THE UPDATES

We recommend that all Ksplice Uptrack RHEL 5 and CentOS 5 users
install these updates.  You can install these updates by running:

# uptrack-upgrade -y

DESCRIPTION

* CVE-2010-3904: Local privilege escalation vulnerability in RDS sockets.

The rds_page_copy_user function did not perform any access checks on
user-provided pointers before using unchecked __copy_*_user_inatomic
functions, which can be exploited by a local user to write to
arbitrary kernel memory and escalate privileges.

SUPPORT

Ksplice support is available at support at ksplice.com or +1 765-577-5423.