Red Hat Security AdvisoryRHSA-2017:1308
kernel security, bug fix, and enhancement update
Released 2017-05-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-514.21.1.el7, kernel-abi-whitelists-3.10.0-514.21.1.el7, kernel-debug-3.10.0-514.21.1.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-514.21.1.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-514.21.1.el7, kernel-abi-whitelists-3.10.0-514.21.1.el7, kernel-debug-3.10.0-514.21.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-514.21.1.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-514.21.1.el7, kernel-abi-whitelists-3.10.0-514.21.1.el7, kernel-bootwrapper-3.10.0-514.21.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-514.21.1.el7, kernel-tools-libs-devel-3.10.0-514.21.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-514.21.1.el7, kernel-abi-whitelists-3.10.0-514.21.1.el7, kernel-debug-3.10.0-514.21.1.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-514.21.1.el7
Fixes 5 records
Priority MEDIUM 51
The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (integer signedness erro…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.17827 · Published 2017-03-29 · Fixed CWE-681
Priority LOW 39
Use-after-free vulnerability in the disk_seqf_stop function in block/genhd.c in the Linux kernel before 4.7.1 allows local users to gain privileges by leveraging the execution of a certain stop operation even if the corr…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02966 · Published 2016-11-16 · Fixed CWE-416
Priority LOW 27
Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a denial of service (assertion failure and panic) via a multithreaded application tha…
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01162 · Published 2017-02-18 · Partial fix CWE-362
Priority LOW 25
The hash_accept function in crypto/algif_hash.c in the Linux kernel before 4.3.6 allows local users to cause a denial of service (OOPS) by attempting to trigger use of in-kernel hash algorithms for a socket that has rece…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00426 · Published 2016-11-28 · Fixed CWE-476
Priority LOW 20
The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service (out-of-bounds read…
CVSS 3.0MEDIUM 4.3· Physical · Low privileges · No interaction · EPSS 0.00428 · Published 2017-02-06 · Fixed CWE-125
THREATIST.IORead the docs