Red Hat Security AdvisoryRHSA-2018:0470
Red Hat Enterprise MRG Realtime 2.5 security and enhancement update
Released 2018-03-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat MRG Realtime for RHEL 6 Server v.2 kernel-rt-1:3.10.0-693.21.1.rt56.607.el6rt, kernel-rt-debug-1:3.10.0-693.21.1.rt56.607.el6rt, kernel-rt-debug-devel-1:3.10.0-693.21.1.rt56.607.el6rt +7
Fixes 2 records
Priority LOW 35
In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.07207 · Published 2018-01-11 · Partial fix CWE-476
Priority LOW 34
In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size fun…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00452 · Published 2018-01-11 · Partial fix CWE-787
