title: Red Hat Security Advisory: kernel security and bug fix update
description: kernel: AIO interface didn't use rw_verify_area() for checking mandatory locking on files and size of access kernel: AIO write triggers integer overflow in some protocols kernel: Null pointer dereference via keyctl kernel: ping socket / AF_LLC connect() sin_family race kernel: Race condition between multiple sys_perf_event_open() calls kernel: net/packet: overflow in check for priv area size kernel: Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c kernel: mm subsystem does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism kernel: Double free in the inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c kernel: net: sctp_v6_create_accept_sk function mishandles inheritance kernel: net: IPv6 DCCP implementation mishandles inheritance kernel: net: tcp_v6_syn_recv_sock function mishandles inheritance kernel: memory leak when merging buffers in SCSI IO vectors kernel: vfs: BUG in truncate_inode_pages_range() and fuse client kernel: Race condition in drivers/md/dm.c:dm_get_from_kobject() allows local users to cause a denial of service kernel: a null pointer dereference in net/dccp/output.c:dccp_write_xmit() leads to a system crash hw: cpu: speculative store bypass kernel: Missing length check of payload in net/sctp/sm_make_chunk.c:_sctp_make_chunk() function allows denial of service
cpes: cpe:/o:redhat:enterprise_linux:6::client cpe:/o:redhat:enterprise_linux:6::computenode cpe:/o:redhat:enterprise_linux:6::server cpe:/o:redhat:enterprise_linux:6::workstation