Red Hat Security Advisory

RHSA-2018:2776

kernel security and bug fix update

Released 2018-09-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux ComputeNode EUS (v. 7.4) kernel-3.10.0-693.39.1.el7, kernel-abi-whitelists-3.10.0-693.39.1.el7, kernel-debug-3.10.0-693.39.1.el7 +8
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.39.1.el7
Red Hat Enterprise Linux Server EUS (v. 7.4) kernel-3.10.0-693.39.1.el7, kernel-abi-whitelists-3.10.0-693.39.1.el7, kernel-bootwrapper-3.10.0-693.39.1.el7 +11
Red Hat Enterprise Linux Server Optional EUS (v. 7.4) kernel-debug-devel-3.10.0-693.39.1.el7, kernel-tools-libs-devel-3.10.0-693.39.1.el7

Fixes 1 record

TI-2018-03923 CVE-2018-5390 · GHSA-grv8-gqh3-fmc9

Uncontrolled resource consumption in Linux Kernel

HIGH 71

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.71767 Published 2018-08-06 Partial fix CWE-400