Priority HIGH 69
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
RHSA-2018:0151
kernel security and bug fix update
Released 2018-01-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-693.17.1.el7, kernel-abi-whitelists-3.10.0-693.17.1.el7, kernel-debug-3.10.0-693.17.1.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-693.17.1.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-693.17.1.el7, kernel-abi-whitelists-3.10.0-693.17.1.el7, kernel-debug-3.10.0-693.17.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-693.17.1.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-693.17.1.el7, kernel-abi-whitelists-3.10.0-693.17.1.el7, kernel-bootwrapper-3.10.0-693.17.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-693.17.1.el7, kernel-tools-libs-devel-3.10.0-693.17.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-693.17.1.el7, kernel-abi-whitelists-3.10.0-693.17.1.el7, kernel-debug-3.10.0-693.17.1.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-693.17.1.el7
Fixes 6 records
TI-2017-11440 CVE-2017-15649 · GHSA-wjx2-qc46-g62h
net/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain…
Priority LOW 36
net/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls that trigger mishandling of packet_fanout data structures, because of a race condition (involving fa…
TI-2015-07024 CVE-2015-8539 · GHSA-6m9m-6qjp-9mm8
The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges…
Priority LOW 34
The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted…
TI-2017-05119 CVE-2017-7472 · GHSA-77r7-v55r-g5r7
The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a…
Priority LOW 29
The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring calls.
TI-2017-08983 CVE-2017-12193 · GHSA-7c55-6mqj-q569
NULL pointer dereference in Linux kernel since 3.13 up to 4.14
Priority LOW 25
The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and pa…
TI-2017-08982 CVE-2017-12192 · GHSA-5f4v-rcv7-7fmj
The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent…
Priority LOW 25
The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows…