Red Hat Security AdvisoryRHSA-2018:1737
kernel security and bug fix update
Released 2018-05-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.3) kernel-3.10.0-514.51.1.el7, kernel-abi-whitelists-3.10.0-514.51.1.el7, kernel-debug-3.10.0-514.51.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.51.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.3) kernel-3.10.0-514.51.1.el7, kernel-abi-whitelists-3.10.0-514.51.1.el7, kernel-bootwrapper-3.10.0-514.51.1.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.3) kernel-debug-devel-3.10.0-514.51.1.el7, kernel-tools-libs-devel-3.10.0-514.51.1.el7
Fixes 2 records
Priority HIGH 74
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or poss…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.52841 · Published 2018-01-03 · Partial fix CWE-416
Priority MEDIUM 59
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an atta…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.60156 · Published 2018-05-22 · Partial fix CWE-203
