Red Hat Security Advisory

RHSA-2019:1481

kernel security update

Released 2019-06-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-957.21.3.el7, kernel-3.10.0-957.21.3.el7, kernel-abi-whitelists-3.10.0-957.21.3.el7 +8
Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.21.3.el7
Red Hat Enterprise Linux ComputeNode (v. 7) bpftool-3.10.0-957.21.3.el7, kernel-3.10.0-957.21.3.el7, kernel-abi-whitelists-3.10.0-957.21.3.el7 +8
Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.21.3.el7
Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-957.21.3.el7, kernel-3.10.0-957.21.3.el7, kernel-abi-whitelists-3.10.0-957.21.3.el7 +11
Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-957.21.3.el7, kernel-tools-libs-devel-3.10.0-957.21.3.el7
Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-957.21.3.el7, kernel-3.10.0-957.21.3.el7, kernel-abi-whitelists-3.10.0-957.21.3.el7 +8
Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.21.3.el7

Fixes 3 records

TI-2019-08569 CVE-2019-11477 · GHSA-748j-px2m-cwgh

Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs

HIGH 78

Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.98745 Published 2019-06-18 Fixed in 4.4.182, 4.9.182 +3 CWE-190

TI-2019-08570 CVE-2019-11478 · GHSA-xh2h-cw6h-x9h5

SACK can cause extensive memory use via fragmented resend queue

HIGH 77

Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.94414 Published 2019-06-18 Partial fix · 4.4.182, 4.9.182 +3 CWE-770

TI-2019-08571 CVE-2019-11479 · GHSA-99cq-xr7g-h22w

Resource allocation without limits in Linux kernel

HIGH 76

Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.91326 Published 2019-06-18 Partial fix · 4.4.182, 4.9.182 +3 CWE-405