Red Hat Security Advisory

RHSA-2018:3666

kernel-rt security and bug fix update

Released 2018-11-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Realtime (v. 7) kernel-rt-3.10.0-957.1.3.rt56.913.el7, kernel-rt-debug-3.10.0-957.1.3.rt56.913.el7, kernel-rt-debug-devel-3.10.0-957.1.3.rt56.913.el7 +4
Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-957.1.3.rt56.913.el7, kernel-rt-debug-3.10.0-957.1.3.rt56.913.el7, kernel-rt-debug-devel-3.10.0-957.1.3.rt56.913.el7 +7

Fixes 2 records

TI-2018-10498 CVE-2018-14633 · GHSA-88p5-45fx-5x87

Stack-based buffer overflow in backstage kernel

MEDIUM 42

A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is processed.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.08743 Published 2018-09-25 Partial fix CWE-121

TI-2018-10509 CVE-2018-14646 · GHSA-x5cj-fgc8-52c7

NULL pointer dereference in [UNKNOWN] kernel:

LOW 25

The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netlink.c file.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00393 Published 2018-11-26 Partial fix CWE-476