Red Hat Security Advisory

RHSA-2018:3651

kernel security, bug fix, and enhancement update

Released 2018-11-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-957.1.3.el7, kernel-3.10.0-957.1.3.el7, kernel-abi-whitelists-3.10.0-957.1.3.el7 +9
Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.1.3.el7
Red Hat Enterprise Linux ComputeNode (v. 7) bpftool-3.10.0-957.1.3.el7, kernel-3.10.0-957.1.3.el7, kernel-abi-whitelists-3.10.0-957.1.3.el7 +9
Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.1.3.el7
Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-957.1.3.el7, kernel-3.10.0-957.1.3.el7, kernel-abi-whitelists-3.10.0-957.1.3.el7 +12
Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-957.1.3.el7, kernel-tools-libs-devel-3.10.0-957.1.3.el7
Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-957.1.3.el7, kernel-3.10.0-957.1.3.el7, kernel-abi-whitelists-3.10.0-957.1.3.el7 +9
Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.1.3.el7

Fixes 2 records

TI-2018-10498 CVE-2018-14633 · GHSA-88p5-45fx-5x87

Stack-based buffer overflow in backstage kernel

MEDIUM 42

A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is processed.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.08743 Published 2018-09-25 Partial fix CWE-121

TI-2018-10509 CVE-2018-14646 · GHSA-x5cj-fgc8-52c7

NULL pointer dereference in [UNKNOWN] kernel:

LOW 25

The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netlink.c file.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00393 Published 2018-11-26 Partial fix CWE-476