Red Hat Security AdvisoryRHSA-2018:1319
kernel security and bug fix update
Released 2018-05-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-696.28.1.el6, kernel-abi-whitelists-2.6.32-696.28.1.el6, kernel-debug-2.6.32-696.28.1.el6 +6
- Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-696.28.1.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-696.28.1.el6, kernel-abi-whitelists-2.6.32-696.28.1.el6, kernel-debug-2.6.32-696.28.1.el6 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-696.28.1.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-696.28.1.el6, kernel-abi-whitelists-2.6.32-696.28.1.el6, kernel-bootwrapper-2.6.32-696.28.1.el6 +9
- Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-696.28.1.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-696.28.1.el6, kernel-abi-whitelists-2.6.32-696.28.1.el6, kernel-debug-2.6.32-696.28.1.el6 +6
- Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-696.28.1.el6
Fixes 8 records
Priority HIGH 74
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or poss…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.52841 · Published 2018-01-03 · Partial fix CWE-416
Priority MEDIUM 63
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.73249 · Published 2018-01-04 · Partial fix CWE-203
Priority MEDIUM 62
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data c…
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.67407 · Published 2018-01-04 · Fixed CWE-200
Priority MEDIUM 52
A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected beh…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.18485 · Published 2018-05-08 · Partial fix CWE-362
Priority MEDIUM 42
The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, a…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05905 · Published 2017-04-18 · Partial fix CWE-20
Priority MEDIUM 40
The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04252 · Published 2017-12-07 · Fixed CWE-200
Priority LOW 37
The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01344 · Published 2017-12-05 · Fixed CWE-416
Priority LOW 34
An elevation of privilege vulnerability in the kernel v4l2 video driver.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00359 · Published 2017-12-06 · Partial fix CWE-787
THREATIST.IORead the docs