Red Hat Security Advisory

RHSA-2018:3843

kernel security and bug fix update

Released 2018-12-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) kernel-3.10.0-862.25.3.el7, kernel-abi-whitelists-3.10.0-862.25.3.el7, kernel-debug-3.10.0-862.25.3.el7 +8
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) kernel-tools-libs-devel-3.10.0-862.25.3.el7
Red Hat Enterprise Linux Server EUS (v. 7.5) kernel-3.10.0-862.25.3.el7, kernel-abi-whitelists-3.10.0-862.25.3.el7, kernel-bootwrapper-3.10.0-862.25.3.el7 +11
Red Hat Enterprise Linux Server Optional EUS (v. 7.5) kernel-debug-devel-3.10.0-862.25.3.el7, kernel-tools-libs-devel-3.10.0-862.25.3.el7

Fixes 1 record

TI-2018-10509 CVE-2018-14646 · GHSA-x5cj-fgc8-52c7

NULL pointer dereference in [UNKNOWN] kernel:

LOW 25

The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netlink.c file.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00393 Published 2018-11-26 Partial fix CWE-476