Red Hat Security Advisory

RHSA-2018:2790

kernel security and bug fix update

Released 2018-09-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.2) kernel-3.10.0-327.73.1.el7, kernel-abi-whitelists-3.10.0-327.73.1.el7, kernel-debug-3.10.0-327.73.1.el7 +8
Red Hat Enterprise Linux Server E4S (v. 7.2) kernel-3.10.0-327.73.1.el7, kernel-abi-whitelists-3.10.0-327.73.1.el7, kernel-debug-3.10.0-327.73.1.el7 +8
Red Hat Enterprise Linux Server Optional AUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.73.1.el7
Red Hat Enterprise Linux Server Optional E4S (v. 7.2) kernel-tools-libs-devel-3.10.0-327.73.1.el7
Red Hat Enterprise Linux Server Optional TUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.73.1.el7
Red Hat Enterprise Linux Server TUS (v. 7.2) kernel-3.10.0-327.73.1.el7, kernel-abi-whitelists-3.10.0-327.73.1.el7, kernel-debug-3.10.0-327.73.1.el7 +8

Fixes 1 record

TI-2018-03923 CVE-2018-5390 · GHSA-grv8-gqh3-fmc9

Uncontrolled resource consumption in Linux Kernel

HIGH 71

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.71767 Published 2018-08-06 Partial fix CWE-400