Red Hat Security AdvisoryRHSA-2018:2164
kernel security and bug fix update
Released 2018-07-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-754.2.1.el6, kernel-abi-whitelists-2.6.32-754.2.1.el6, kernel-debug-2.6.32-754.2.1.el6 +6
- Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-754.2.1.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-754.2.1.el6, kernel-abi-whitelists-2.6.32-754.2.1.el6, kernel-debug-2.6.32-754.2.1.el6 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-754.2.1.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-754.2.1.el6, kernel-abi-whitelists-2.6.32-754.2.1.el6, kernel-bootwrapper-2.6.32-754.2.1.el6 +9
- Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-754.2.1.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-754.2.1.el6, kernel-abi-whitelists-2.6.32-754.2.1.el6, kernel-debug-2.6.32-754.2.1.el6 +6
- Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-754.2.1.el6
Fixes 4 records
Priority MEDIUM 59
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an atta…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.60156 · Published 2018-05-22 · Partial fix CWE-203
Priority LOW 34
The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00442 · Published 2018-05-02 · Partial fix CWE-416
Priority LOW 29
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions.
CVSS 3.0MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00465 · Published 2018-07-10 · Fixed CWE-250
Priority LOW 26
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side ch…
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.00627 · Published 2018-06-21 · Partial fix CWE-200
THREATIST.IORead the docs