Red Hat Security AdvisoryRHSA-2019:1479
kernel security and bug fix update
Released 2019-06-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-80.4.2.el8_0
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-80.4.2.el8_0, kernel-4.18.0-80.4.2.el8_0, kernel-abi-whitelists-4.18.0-80.4.2.el8_0 +19
Fixes 4 records
Priority HIGH 78
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.98745 · Published 2019-06-18 · Fixed in 4.4.182, 4.9.182 +3 CWE-190
Priority HIGH 77
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.94414 · Published 2019-06-18 · Partial fix · 4.4.182, 4.9.182 +3 CWE-770
Priority HIGH 76
Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.91326 · Published 2019-06-18 · Partial fix · 4.4.182, 4.9.182 +3 CWE-405
Priority LOW 33
In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.05667 · Published 2019-03-05 · Fixed CWE-476
THREATIST.IORead the docs