Red Hat Security AdvisoryRHSA-2018:2390
kernel security and bug fix update
Released 2018-08-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-754.3.5.el6, kernel-abi-whitelists-2.6.32-754.3.5.el6, kernel-debug-2.6.32-754.3.5.el6 +6
- Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-754.3.5.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-754.3.5.el6, kernel-abi-whitelists-2.6.32-754.3.5.el6, kernel-debug-2.6.32-754.3.5.el6 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-754.3.5.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-754.3.5.el6, kernel-abi-whitelists-2.6.32-754.3.5.el6, kernel-bootwrapper-2.6.32-754.3.5.el6 +9
- Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-754.3.5.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-754.3.5.el6, kernel-abi-whitelists-2.6.32-754.3.5.el6, kernel-debug-2.6.32-754.3.5.el6 +6
- Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-754.3.5.el6
Fixes 9 records
Priority HIGH 71
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.71767 · Published 2018-08-06 · Partial fix CWE-400
Priority LOW 36
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel…
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.08625 · Published 2018-07-10 · Partial fix
Priority LOW 36
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS pri…
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.08101 · Published 2018-08-14 · Fixed CWE-200
Priority LOW 35
A flaw was found in Linux kernel's KVM virtualization subsystem.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0052 · Published 2018-07-26 · Fixed CWE-665
Priority LOW 35
The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00473 · Published 2018-03-30 · Fixed CWE-119
Priority LOW 34
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal pa…
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.05577 · Published 2018-08-14 · Fixed CWE-203
Priority LOW 34
Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00427 · Published 2017-11-16 · Partial fix CWE-416
Priority LOW 33
In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound system, this can lead to a deadlock and denial of service condition.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.03543 · Published 2018-01-16 · Partial fix CWE-362
Priority LOW 31
Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, rela…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00377 · Published 2017-10-16 · Partial fix CWE-362
THREATIST.IORead the docs