Red Hat Security AdvisoryRHSA-2018:2384
kernel security and bug fix update
Released 2018-08-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-862.11.6.el7, kernel-abi-whitelists-3.10.0-862.11.6.el7, kernel-debug-3.10.0-862.11.6.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-862.11.6.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-862.11.6.el7, kernel-abi-whitelists-3.10.0-862.11.6.el7, kernel-debug-3.10.0-862.11.6.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-862.11.6.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-862.11.6.el7, kernel-abi-whitelists-3.10.0-862.11.6.el7, kernel-bootwrapper-3.10.0-862.11.6.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-862.11.6.el7, kernel-tools-libs-devel-3.10.0-862.11.6.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-862.11.6.el7, kernel-abi-whitelists-3.10.0-862.11.6.el7, kernel-debug-3.10.0-862.11.6.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-862.11.6.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) kernel-3.10.0-862.11.6.el7, kernel-abi-whitelists-3.10.0-862.11.6.el7, kernel-bootwrapper-3.10.0-862.11.6.el7 +11
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kernel-debug-devel-3.10.0-862.11.6.el7, kernel-doc-3.10.0-862.11.6.el7, kernel-tools-libs-devel-3.10.0-862.11.6.el7
Fixes 7 records
Priority HIGH 71
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.71767 · Published 2018-08-06 · Partial fix CWE-400
Priority LOW 36
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel…
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.08625 · Published 2018-07-10 · Partial fix
Priority LOW 36
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS pri…
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.08101 · Published 2018-08-14 · Fixed CWE-200
Priority LOW 35
The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00473 · Published 2018-03-30 · Fixed CWE-119
Priority LOW 34
The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00442 · Published 2018-05-02 · Partial fix CWE-416
Priority LOW 34
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal pa…
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.05577 · Published 2018-08-14 · Fixed CWE-203
Priority LOW 34
A elevation of privilege vulnerability in the Upstream kernel skcipher.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0031 · Published 2018-01-12 · Fixed
THREATIST.IORead the docs