Red Hat Security AdvisoryRHSA-2018:3591
kernel security and bug fix update
Released 2018-11-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.3) kernel-3.10.0-514.61.1.el7, kernel-abi-whitelists-3.10.0-514.61.1.el7, kernel-debug-3.10.0-514.61.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.61.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.3) kernel-3.10.0-514.61.1.el7, kernel-abi-whitelists-3.10.0-514.61.1.el7, kernel-bootwrapper-3.10.0-514.61.1.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.3) kernel-debug-devel-3.10.0-514.61.1.el7, kernel-tools-libs-devel-3.10.0-514.61.1.el7
Fixes 2 records
Priority CRITICAL 93KEV
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.14689 · Published 2018-09-25 · Fixed CWE-190
Priority LOW 31
The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer fu…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.03443 · Published 2018-07-26 · Fixed CWE-125