Red Hat Security AdvisoryRHSA-2017:0217
kernel security and bug fix update
Released 2017-01-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.2) kernel-3.10.0-327.46.1.el7, kernel-abi-whitelists-3.10.0-327.46.1.el7, kernel-debug-3.10.0-327.46.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.46.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.2) kernel-3.10.0-327.46.1.el7, kernel-abi-whitelists-3.10.0-327.46.1.el7, kernel-bootwrapper-3.10.0-327.46.1.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.2) kernel-debug-devel-3.10.0-327.46.1.el7, kernel-tools-libs-devel-3.10.0-327.46.1.el7
Fixes 2 records
Priority MEDIUM 62
Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandl…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.23558 · Published 2016-10-10 · Fixed CWE-19
Priority LOW 28
fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating many pipes with non-default sizes.
CVSS 3.0MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00557 · Published 2016-04-27 · Partial fix CWE-399
