Red Hat Security AdvisoryRHSA-2016:1539
kernel security and bug fix update
Released 2016-08-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-327.28.2.el7, kernel-abi-whitelists-3.10.0-327.28.2.el7, kernel-debug-3.10.0-327.28.2.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-327.28.2.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-327.28.2.el7, kernel-abi-whitelists-3.10.0-327.28.2.el7, kernel-debug-3.10.0-327.28.2.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-327.28.2.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-327.28.2.el7, kernel-abi-whitelists-3.10.0-327.28.2.el7, kernel-bootwrapper-3.10.0-327.28.2.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-327.28.2.el7, kernel-tools-libs-devel-3.10.0-327.28.2.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-327.28.2.el7, kernel-abi-whitelists-3.10.0-327.28.2.el7, kernel-debug-3.10.0-327.28.2.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-327.28.2.el7
Fixes 3 records
Priority MEDIUM 49
The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.22204 · Published 2015-12-28 · Fixed CWE-264
Priority LOW 35
The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service (system crash) or possibly have unspecified ot…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00557 · Published 2016-04-27 · Fixed CWE-20
Priority LOW 26
The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash)…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00582 · Published 2016-06-27 · Fixed
THREATIST.IORead the docs