Red Hat Security AdvisoryRHSA-2017:2437
kernel security and bug fix update
Released 2017-08-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.3) kernel-3.10.0-514.28.1.el7, kernel-abi-whitelists-3.10.0-514.28.1.el7, kernel-debug-3.10.0-514.28.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.28.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.3) kernel-3.10.0-514.28.1.el7, kernel-abi-whitelists-3.10.0-514.28.1.el7, kernel-bootwrapper-3.10.0-514.28.1.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.3) kernel-debug-devel-3.10.0-514.28.1.el7, kernel-tools-libs-devel-3.10.0-514.28.1.el7
Fixes 4 records
Priority MEDIUM 45
The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.09483 · Published 2017-07-02 · Partial fix CWE-129
Priority LOW 34
The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match fie…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00408 · Published 2017-03-31 · Fixed CWE-476
Priority LOW 31
Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without pro…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00296 · Published 2017-03-07 · Fixed CWE-264
Priority LOW 25
crypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AF_ALG socket before an accept system call is processed, which allows local users to cause a denia…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00519 · Published 2016-11-28 · Fixed CWE-476
THREATIST.IORead the docs