ALAS-2014-339


Amazon Linux 1 Security Advisory: ALAS-2014-339
Advisory Release Date: 2014-05-13 16:40 Pacific
Advisory Updated Date: 2014-09-18 00:34 Pacific
Severity: Medium

Issue Overview:

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.


Affected Packages:

kernel


Issue Correction:
Run yum update kernel to update your system. You will need to reboot your system in order for the new kernel to be running.

New Packages:
i686:
    perf-debuginfo-3.10.40-50.136.amzn1.i686
    perf-3.10.40-50.136.amzn1.i686
    kernel-3.10.40-50.136.amzn1.i686
    kernel-headers-3.10.40-50.136.amzn1.i686
    kernel-devel-3.10.40-50.136.amzn1.i686
    kernel-debuginfo-common-i686-3.10.40-50.136.amzn1.i686
    kernel-debuginfo-3.10.40-50.136.amzn1.i686

noarch:
    kernel-doc-3.10.40-50.136.amzn1.noarch

src:
    kernel-3.10.40-50.136.amzn1.src

x86_64:
    perf-3.10.40-50.136.amzn1.x86_64
    kernel-devel-3.10.40-50.136.amzn1.x86_64
    kernel-debuginfo-3.10.40-50.136.amzn1.x86_64
    kernel-3.10.40-50.136.amzn1.x86_64
    kernel-headers-3.10.40-50.136.amzn1.x86_64
    kernel-debuginfo-common-x86_64-3.10.40-50.136.amzn1.x86_64
    perf-debuginfo-3.10.40-50.136.amzn1.x86_64