Red Hat Security AdvisoryRHSA-2017:1372
kernel security and bug fix update
Released 2017-05-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-696.3.1.el6, kernel-abi-whitelists-2.6.32-696.3.1.el6, kernel-debug-2.6.32-696.3.1.el6 +6
- Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-696.3.1.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-696.3.1.el6, kernel-abi-whitelists-2.6.32-696.3.1.el6, kernel-debug-2.6.32-696.3.1.el6 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-696.3.1.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-696.3.1.el6, kernel-abi-whitelists-2.6.32-696.3.1.el6, kernel-bootwrapper-2.6.32-696.3.1.el6 +9
- Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-696.3.1.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-696.3.1.el6, kernel-abi-whitelists-2.6.32-696.3.1.el6, kernel-debug-2.6.32-696.3.1.el6 +6
- Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-696.3.1.el6
Fixes 1 record
Priority MEDIUM 40
The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04666 · Published 2017-02-23 · Fixed CWE-835
