Red Hat Security AdvisoryRHSA-2018:2924
kernel security and bug fix update
Released 2018-10-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 6.6) kernel-2.6.32-504.76.2.el6, kernel-abi-whitelists-2.6.32-504.76.2.el6, kernel-debug-2.6.32-504.76.2.el6 +6
- Red Hat Enterprise Linux Server Optional AUS (v. 6.6) python-perf-2.6.32-504.76.2.el6
- Red Hat Enterprise Linux Server Optional TUS (v. 6.6) python-perf-2.6.32-504.76.2.el6
- Red Hat Enterprise Linux Server TUS (v. 6.6) kernel-2.6.32-504.76.2.el6, kernel-abi-whitelists-2.6.32-504.76.2.el6, kernel-debug-2.6.32-504.76.2.el6 +6
Fixes 4 records
Priority CRITICAL 93KEV
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.14689 · Published 2018-09-25 · Fixed CWE-190
Priority HIGH 71
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.71767 · Published 2018-08-06 · Partial fix CWE-400
Priority MEDIUM 57
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.32445 · Published 2018-09-06 · Partial fix CWE-400
Priority LOW 34
The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00442 · Published 2018-05-02 · Partial fix CWE-416