Red Hat Security AdvisoryRHSA-2016:1847
kernel security, bug fix, and enhancement update
Released 2016-09-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-327.36.1.el7, kernel-abi-whitelists-3.10.0-327.36.1.el7, kernel-debug-3.10.0-327.36.1.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-327.36.1.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-327.36.1.el7, kernel-abi-whitelists-3.10.0-327.36.1.el7, kernel-debug-3.10.0-327.36.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-327.36.1.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-327.36.1.el7, kernel-abi-whitelists-3.10.0-327.36.1.el7, kernel-bootwrapper-3.10.0-327.36.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-327.36.1.el7, kernel-tools-libs-devel-3.10.0-327.36.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-327.36.1.el7, kernel-abi-whitelists-3.10.0-327.36.1.el7, kernel-debug-3.10.0-327.36.1.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-327.36.1.el7
Fixes 5 records
Priority MEDIUM 43
The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corru…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.05676 · Published 2016-07-03 · Fixed CWE-264
Priority LOW 39
The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLA…
CVSS 3.0HIGH 8.4· Local · No auth · No interaction · EPSS 0.01234 · Published 2016-04-27 · Partial fix CWE-119
Priority LOW 35
The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information fro…
CVSS 3.0HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.01885 · Published 2016-07-03 · Fixed CWE-119
Priority LOW 26
The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service (system crash) via a…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00637 · Published 2016-08-06 · Partial fix CWE-284
Priority LOW 25
fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing, which allows local u…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00505 · Published 2016-08-06 · Partial fix CWE-20
THREATIST.IORead the docs