Red Hat Security Advisory

RHSA-2017:0113

kernel-rt security and bug fix update

Released 2017-01-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat MRG Realtime for RHEL 6 Server v.2 kernel-rt-1:3.10.0-514.rt56.210.el6rt, kernel-rt-debug-1:3.10.0-514.rt56.210.el6rt, kernel-rt-debug-devel-1:3.10.0-514.rt56.210.el6rt +7

Fixes 4 records

TI-2016-06118 CVE-2016-7117 · GHSA-ggx5-r43p-75wm

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux…

MEDIUM 62

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandl…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.23558 Published 2016-10-10 Fixed CWE-19

TI-2016-07778 CVE-2016-9555 · GHSA-x329-xh53-wmqc

The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8…

MEDIUM 54

The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10019 Published 2016-11-28 Partial fix CWE-125

TI-2017-09784 CVE-2017-13167 · GHSA-pg9w-32jf-9x5r

An elevation of privilege vulnerability in the kernel sound timer.

LOW 33

An elevation of privilege vulnerability in the kernel sound timer.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00191 Published 2017-12-06 Partial fix

TI-2016-05866 CVE-2016-6828 · GHSA-2cwm-q27v-2mv8

The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5…

LOW 27

The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service (tcp_xm…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01181 Published 2016-10-16 Partial fix CWE-416