Red Hat Security AdvisoryRHSA-2019:0512
kernel security, bug fix, and enhancement update
Released 2019-03-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-957.10.1.el7, kernel-3.10.0-957.10.1.el7, kernel-abi-whitelists-3.10.0-957.10.1.el7 +9
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.10.1.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) bpftool-3.10.0-957.10.1.el7, kernel-3.10.0-957.10.1.el7, kernel-abi-whitelists-3.10.0-957.10.1.el7 +9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.10.1.el7
- Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-957.10.1.el7, kernel-3.10.0-957.10.1.el7, kernel-abi-whitelists-3.10.0-957.10.1.el7 +12
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-957.10.1.el7, kernel-tools-libs-devel-3.10.0-957.10.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-957.10.1.el7, kernel-3.10.0-957.10.1.el7, kernel-abi-whitelists-3.10.0-957.10.1.el7 +9
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.10.1.el7
Fixes 3 records
Priority LOW 35
In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/b…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00537 · Published 2018-10-17 · Fixed CWE-125
Priority LOW 35
In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00759 · Published 2018-12-06 · Partial fix CWE-704
Priority LOW 25
An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00364 · Published 2018-10-03 · Partial fix CWE-362
