Red Hat Security AdvisoryRHSA-2018:1318
kernel security, bug fix, and enhancement update
Released 2018-05-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-862.2.3.el7, kernel-abi-whitelists-3.10.0-862.2.3.el7, kernel-debug-3.10.0-862.2.3.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-862.2.3.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-862.2.3.el7, kernel-abi-whitelists-3.10.0-862.2.3.el7, kernel-debug-3.10.0-862.2.3.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-862.2.3.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-862.2.3.el7, kernel-abi-whitelists-3.10.0-862.2.3.el7, kernel-bootwrapper-3.10.0-862.2.3.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-862.2.3.el7, kernel-tools-libs-devel-3.10.0-862.2.3.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-862.2.3.el7, kernel-abi-whitelists-3.10.0-862.2.3.el7, kernel-debug-3.10.0-862.2.3.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-862.2.3.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) kernel-3.10.0-862.2.3.el7, kernel-abi-whitelists-3.10.0-862.2.3.el7, kernel-bootwrapper-3.10.0-862.2.3.el7 +11
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kernel-debug-devel-3.10.0-862.2.3.el7, kernel-doc-3.10.0-862.2.3.el7, kernel-tools-libs-devel-3.10.0-862.2.3.el7
Fixes 6 records
Priority MEDIUM 52
A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected beh…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.18485 · Published 2018-05-08 · Partial fix CWE-362
Priority LOW 38
The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0215 · Published 2017-11-24 · Fixed CWE-416
Priority LOW 36
kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stac…
CVSS 3.0HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00743 · Published 2018-05-15 · Partial fix CWE-250
Priority LOW 30
A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00448 · Published 2018-03-16 · Fixed CWE-119
Priority LOW 27
The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01191 · Published 2018-05-24 · Fixed CWE-119
Priority LOW 25
In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a miss…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00403 · Published 2018-03-27 · Fixed CWE-391
THREATIST.IORead the docs