Red Hat Security AdvisoryRHSA-2017:0386
kernel security, bug fix, and enhancement update
Released 2017-03-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-514.10.2.el7, kernel-abi-whitelists-3.10.0-514.10.2.el7, kernel-debug-3.10.0-514.10.2.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-514.10.2.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-514.10.2.el7, kernel-abi-whitelists-3.10.0-514.10.2.el7, kernel-debug-3.10.0-514.10.2.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-514.10.2.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-514.10.2.el7, kernel-abi-whitelists-3.10.0-514.10.2.el7, kernel-bootwrapper-3.10.0-514.10.2.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-514.10.2.el7, kernel-tools-libs-devel-3.10.0-514.10.2.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-514.10.2.el7, kernel-abi-whitelists-3.10.0-514.10.2.el7, kernel-debug-3.10.0-514.10.2.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-514.10.2.el7
Fixes 4 records
Priority MEDIUM 47
Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.11127 · Published 2016-12-08 · Fixed CWE-362
Priority LOW 34
drivers/vfio/pci/vfio_pci_intrs.c in the Linux kernel through 4.8.11 misuses the kzalloc function, which allows local users to cause a denial of service (integer overflow) or have unspecified other impact by leveraging a…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00375 · Published 2016-11-28 · Fixed CWE-190
Priority LOW 34
drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corruption) or have unspecified other impact, by leveraging acces…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00383 · Published 2016-11-28 · Fixed CWE-119
Priority LOW 25
The x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service (host OS crash) via a certain use of a ModR/M byte in an undef…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00364 · Published 2016-11-28 · Fixed CWE-284
THREATIST.IORead the docs