Red Hat Security Advisory

RHSA-2017:0091

kernel-rt security and bug fix update

Released 2017-01-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Realtime (v. 7) kernel-rt-3.10.0-514.6.1.rt56.429.el7, kernel-rt-debug-3.10.0-514.6.1.rt56.429.el7, kernel-rt-debug-devel-3.10.0-514.6.1.rt56.429.el7 +4
Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-514.6.1.rt56.429.el7, kernel-rt-debug-3.10.0-514.6.1.rt56.429.el7, kernel-rt-debug-devel-3.10.0-514.6.1.rt56.429.el7 +7

Fixes 3 records

TI-2016-06118 CVE-2016-7117 · GHSA-ggx5-r43p-75wm

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux…

MEDIUM 62

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandl…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.23558 Published 2016-10-10 Fixed CWE-19

TI-2016-07778 CVE-2016-9555 · GHSA-x329-xh53-wmqc

The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8…

MEDIUM 54

The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10019 Published 2016-11-28 Partial fix CWE-125

TI-2016-05866 CVE-2016-6828 · GHSA-2cwm-q27v-2mv8

The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5…

LOW 27

The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service (tcp_xm…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01181 Published 2016-10-16 Partial fix CWE-416