Integer overflow in backstage kernel
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.
kernel-rt security and bug fix update
Released 2018-11-13 · Red Hat rating Important · View on Red Hat →
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly.
The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.
The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer fu…