Red Hat Security AdvisoryRHSA-2016:1657
kernel security update
Released 2016-08-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.1) kernel-3.10.0-229.40.1.el7, kernel-abi-whitelists-3.10.0-229.40.1.el7, kernel-debug-3.10.0-229.40.1.el7 +7
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.1) kernel-tools-libs-devel-3.10.0-229.40.1.el7, python-perf-3.10.0-229.40.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.1) kernel-3.10.0-229.40.1.ael7b, kernel-3.10.0-229.40.1.el7, kernel-abi-whitelists-3.10.0-229.40.1.ael7b +20
- Red Hat Enterprise Linux Server Optional EUS (v. 7.1) kernel-debug-devel-3.10.0-229.40.1.ael7b, kernel-tools-libs-devel-3.10.0-229.40.1.ael7b, kernel-tools-libs-devel-3.10.0-229.40.1.el7 +2
Fixes 3 records
Priority LOW 37
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
CVSS 3.0MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.14507 · Published 2016-08-06 · Fixed CWE-200
Priority LOW 35
The InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecifi…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00483 · Published 2016-05-23 · Fixed CWE-264
Priority LOW 26
The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash)…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00582 · Published 2016-06-27 · Fixed
THREATIST.IORead the docs