Red Hat Security AdvisoryRHSA-2017:0086
kernel security, bug fix, and enhancement update
Released 2017-01-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-514.6.1.el7, kernel-abi-whitelists-3.10.0-514.6.1.el7, kernel-debug-3.10.0-514.6.1.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-514.6.1.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-514.6.1.el7, kernel-abi-whitelists-3.10.0-514.6.1.el7, kernel-debug-3.10.0-514.6.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-514.6.1.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-514.6.1.el7, kernel-abi-whitelists-3.10.0-514.6.1.el7, kernel-bootwrapper-3.10.0-514.6.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-514.6.1.el7, kernel-tools-libs-devel-3.10.0-514.6.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-514.6.1.el7, kernel-abi-whitelists-3.10.0-514.6.1.el7, kernel-debug-3.10.0-514.6.1.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-514.6.1.el7
Fixes 3 records
Priority MEDIUM 62
Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandl…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.23558 · Published 2016-10-10 · Fixed CWE-19
Priority MEDIUM 54
The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.10019 · Published 2016-11-28 · Partial fix CWE-125
Priority LOW 27
The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service (tcp_xm…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01181 · Published 2016-10-16 · Partial fix CWE-416
THREATIST.IORead the docs