Red Hat Security Advisory

RHSA-2017:0932

kernel-rt security and bug fix update

Released 2017-04-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat MRG Realtime for RHEL 6 Server v.2 kernel-rt-1:3.10.0-514.rt56.219.el6rt, kernel-rt-debug-1:3.10.0-514.rt56.219.el6rt, kernel-rt-debug-devel-1:3.10.0-514.rt56.219.el6rt +7

Fixes 5 records

TI-2017-03980 CVE-2017-6074 · GHSA-2gwg-mmmc-55j4

The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through…

MEDIUM 43

The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cau…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0596 Published 2017-02-18 Partial fix CWE-415

TI-2016-07924 CVE-2016-9793 · GHSA-p7q5-g2pg-7rc9

The sock_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.14…

LOW 37

The sock_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01566 Published 2016-12-28 Fixed CWE-119

TI-2017-01886 CVE-2017-2636 · GHSA-gxfh-c6q2-wcm7

Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local…

LOW 33

Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.01029 Published 2017-03-07 Fixed CWE-362

TI-2017-01869 CVE-2017-2618 · GHSA-hpw2-j46j-hpv2

A flaw was found in the Linux kernel's handling of clearing SELinux attributes on…

LOW 25

A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00459 Published 2018-07-27 Fixed CWE-193

TI-2016-07112 CVE-2016-8650 · GHSA-pjpg-8qgr-gpc5

The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not…

LOW 25

The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and pan…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00406 Published 2016-11-28 Fixed CWE-20