TI-2017-14449 CVE-2017-1000112 · GHSA-r7cm-47vv-77vj
Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch.
Priority MEDIUM 50
Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch.
RHSA-2017:2930
kernel security and bug fix update
Released 2017-10-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-693.5.2.el7, kernel-abi-whitelists-3.10.0-693.5.2.el7, kernel-debug-3.10.0-693.5.2.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-693.5.2.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-693.5.2.el7, kernel-abi-whitelists-3.10.0-693.5.2.el7, kernel-debug-3.10.0-693.5.2.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-693.5.2.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-693.5.2.el7, kernel-abi-whitelists-3.10.0-693.5.2.el7, kernel-bootwrapper-3.10.0-693.5.2.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-693.5.2.el7, kernel-tools-libs-devel-3.10.0-693.5.2.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-693.5.2.el7, kernel-abi-whitelists-3.10.0-693.5.2.el7, kernel-debug-3.10.0-693.5.2.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-693.5.2.el7
Fixes 9 records
TI-2017-08231 CVE-2017-11176 · GHSA-h5wm-hc9w-hp9m
The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer…
Priority MEDIUM 41
The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic.
TI-2017-05199 CVE-2017-7558 · GHSA-5vf3-w6cv-wf86
Out-of-bounds read in Linux kernel
Priority LOW 39
A kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() functions present since version 4.7-rc1 through version 4.13.
TI-2017-04880 CVE-2017-7184 · GHSA-hxjx-r7gc-4xhx
The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through…
Priority LOW 38
The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, which allows local users to obtain root privileges or cau…
TI-2017-05182 CVE-2017-7541 · GHSA-9wmg-hc6h-w65j
Memory corruption in Linux kernel before 4.12.3
Priority LOW 35
The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.12.3 allows local users to cause a denial of service (buffer overflow and system crash) or p…
TI-2016-06906 CVE-2016-8399 · GHSA-jjrq-xfh3-2fg8
Improper access control in Google Android
Priority LOW 35
An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel.
TI-2017-14448 CVE-2017-1000111 · GHSA-7m59-9m96-wch5
Linux kernel: heap out-of-bounds in AF_PACKET sockets.
Priority LOW 34
Linux kernel: heap out-of-bounds in AF_PACKET sockets.
TI-2017-10273 CVE-2017-14106 · GHSA-fwvw-9m43-mj3m
The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows…
Priority LOW 25
The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service (__tcp_select_window divide-by-zero error and system crash) by triggering a disconnect within…
TI-2017-05183 CVE-2017-7542 · GHSA-p8mm-976g-672h
Integer overflow in Linux kernel versions up to and including 4.12
Priority LOW 25
The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw s…