Red Hat Security AdvisoryRHSA-2016:1814
kernel security and bug fix update
Released 2016-09-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 6.5) kernel-2.6.32-431.73.2.el6, kernel-abi-whitelists-2.6.32-431.73.2.el6, kernel-debug-2.6.32-431.73.2.el6 +6
- Red Hat Enterprise Linux Server Optional AUS (v. 6.5) kernel-2.6.32-431.73.2.el6, python-perf-2.6.32-431.73.2.el6
Fixes 2 records
Priority LOW 37
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
CVSS 3.0MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.14507 · Published 2016-08-06 · Fixed CWE-200
Priority LOW 35
The InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecifi…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00483 · Published 2016-05-23 · Fixed CWE-264
