Red Hat Security Advisory

RHSA-2018:1355

kernel-rt security and bug fix update

Released 2018-05-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Realtime (v. 7) kernel-rt-3.10.0-862.2.3.rt56.806.el7, kernel-rt-debug-3.10.0-862.2.3.rt56.806.el7, kernel-rt-debug-devel-3.10.0-862.2.3.rt56.806.el7 +4
Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-862.2.3.rt56.806.el7, kernel-rt-debug-3.10.0-862.2.3.rt56.806.el7, kernel-rt-debug-devel-3.10.0-862.2.3.rt56.806.el7 +7

Fixes 5 records

TI-2018-06436 CVE-2018-8897 · GHSA-j2cv-h77g-5p95

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures…

MEDIUM 52

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected beh…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.18485 Published 2018-05-08 Partial fix CWE-362

TI-2017-12474 CVE-2017-16939 · GHSA-87xr-wmm8-4mx3

The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before…

LOW 38

The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0215 Published 2017-11-24 Fixed CWE-416

TI-2018-01006 CVE-2018-1087 · GHSA-j658-wqr4-q3w7

kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2…

LOW 36

kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stac…

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00743 Published 2018-05-15 Partial fix CWE-250

TI-2018-00988 CVE-2018-1068 · GHSA-xfrv-5h7j-4qvx

Memory corruption in Linux Kernel

LOW 30

A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00448 Published 2018-03-16 Fixed CWE-119

TI-2018-15848 CVE-2018-1000199 · GHSA-5qx2-85hg-v5cr

The Linux Kernel version 3.18 contains a dangerous feature vulnerability in…

LOW 27

The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01191 Published 2018-05-24 Fixed CWE-119