Red Hat Security AdvisoryRHSA-2017:1484
kernel security update
Released 2017-06-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-514.21.2.el7, kernel-abi-whitelists-3.10.0-514.21.2.el7, kernel-debug-3.10.0-514.21.2.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-514.21.2.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-514.21.2.el7, kernel-abi-whitelists-3.10.0-514.21.2.el7, kernel-debug-3.10.0-514.21.2.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-514.21.2.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-514.21.2.el7, kernel-abi-whitelists-3.10.0-514.21.2.el7, kernel-bootwrapper-3.10.0-514.21.2.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-514.21.2.el7, kernel-tools-libs-devel-3.10.0-514.21.2.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-514.21.2.el7, kernel-abi-whitelists-3.10.0-514.21.2.el7, kernel-debug-3.10.0-514.21.2.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-514.21.2.el7
Fixes 2 records
Priority MEDIUM 41
An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel ve…
CVSS 3.0HIGH 7.4· Local · No auth · No interaction · EPSS 0.05186 · Published 2017-06-19 · Partial fix CWE-119
Priority LOW 38
The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01753 · Published 2017-06-19 · Partial fix
