Red Hat Security Advisory

RHSA-2018:0169

kernel security and bug fix update

Released 2018-01-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-696.20.1.el6, kernel-abi-whitelists-2.6.32-696.20.1.el6, kernel-debug-2.6.32-696.20.1.el6 +6
Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-696.20.1.el6
Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-696.20.1.el6, kernel-abi-whitelists-2.6.32-696.20.1.el6, kernel-debug-2.6.32-696.20.1.el6 +6
Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-696.20.1.el6
Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-696.20.1.el6, kernel-abi-whitelists-2.6.32-696.20.1.el6, kernel-bootwrapper-2.6.32-696.20.1.el6 +9
Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-696.20.1.el6
Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-696.20.1.el6, kernel-abi-whitelists-2.6.32-696.20.1.el6, kernel-debug-2.6.32-696.20.1.el6 +6
Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-696.20.1.el6

Fixes 3 records

TI-2017-08231 CVE-2017-11176 · GHSA-h5wm-hc9w-hp9m

The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer…

MEDIUM 41

The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03846 Published 2017-07-11 Partial fix CWE-416

TI-2017-06536 CVE-2017-9074 · GHSA-p32j-872q-3hg6

The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not…

LOW 34

The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service (out-of-bo…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00419 Published 2017-05-19 Partial fix CWE-125

TI-2017-05183 CVE-2017-7542 · GHSA-p8mm-976g-672h

Integer overflow in Linux kernel versions up to and including 4.12

LOW 25

The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw s…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00454 Published 2017-07-21 Partial fix CWE-190