Red Hat Security Advisory

RHSA-2018:3590

kernel security and bug fix update

Released 2018-11-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.2) kernel-3.10.0-327.76.1.el7, kernel-abi-whitelists-3.10.0-327.76.1.el7, kernel-debug-3.10.0-327.76.1.el7 +8
Red Hat Enterprise Linux Server E4S (v. 7.2) kernel-3.10.0-327.76.1.el7, kernel-abi-whitelists-3.10.0-327.76.1.el7, kernel-debug-3.10.0-327.76.1.el7 +8
Red Hat Enterprise Linux Server Optional AUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.76.1.el7
Red Hat Enterprise Linux Server Optional E4S (v. 7.2) kernel-tools-libs-devel-3.10.0-327.76.1.el7
Red Hat Enterprise Linux Server Optional TUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.76.1.el7
Red Hat Enterprise Linux Server TUS (v. 7.2) kernel-3.10.0-327.76.1.el7, kernel-abi-whitelists-3.10.0-327.76.1.el7, kernel-debug-3.10.0-327.76.1.el7 +8

Fixes 4 records

TI-2018-10499 CVE-2018-14634 · GHSA-4994-8w6g-9jvw

Integer overflow in backstage kernel

CRITICAL 93KEV

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.14689 Published 2018-09-25 Fixed CWE-190

TI-2018-03924 CVE-2018-5391 · GHSA-p6x5-xg7h-fj5h

Uncontrolled resource consumption in Linux Kernel

MEDIUM 57

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.32445 Published 2018-09-06 Partial fix CWE-400

TI-2018-07548 CVE-2018-10675 · GHSA-496w-f8vc-3275

The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows…

LOW 34

The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00442 Published 2018-05-02 Partial fix CWE-416

TI-2017-13519 CVE-2017-18344 · GHSA-j9fr-8f9m-c9qc

The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel…

LOW 31

The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer fu…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.03443 Published 2018-07-26 Fixed CWE-125