Red Hat Security Advisory

RHSA-2017:0036

kernel security and bug fix update

Released 2017-01-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-642.13.1.el6, kernel-abi-whitelists-2.6.32-642.13.1.el6, kernel-debug-2.6.32-642.13.1.el6 +6
Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-642.13.1.el6
Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-642.13.1.el6, kernel-abi-whitelists-2.6.32-642.13.1.el6, kernel-debug-2.6.32-642.13.1.el6 +6
Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-642.13.1.el6
Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-642.13.1.el6, kernel-abi-whitelists-2.6.32-642.13.1.el6, kernel-bootwrapper-2.6.32-642.13.1.el6 +9
Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-642.13.1.el6
Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-642.13.1.el6, kernel-abi-whitelists-2.6.32-642.13.1.el6, kernel-debug-2.6.32-642.13.1.el6 +6
Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-642.13.1.el6

Fixes 3 records

TI-2016-06118 CVE-2016-7117 · GHSA-ggx5-r43p-75wm

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux…

MEDIUM 62

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandl…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.23558 Published 2016-10-10 Fixed CWE-19

TI-2016-04318 CVE-2016-4998 · GHSA-j87m-7c2j-m929

The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux…

LOW 35

The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information fro…

CVSS 3.0HIGH 7.1 Local Low privileges No interaction EPSS 0.01885 Published 2016-07-03 Fixed CWE-119

TI-2016-05866 CVE-2016-6828 · GHSA-2cwm-q27v-2mv8

The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5…

LOW 27

The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service (tcp_xm…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01181 Published 2016-10-16 Partial fix CWE-416