Red Hat Security AdvisoryRHSA-2019:1485
kernel security and bug fix update
Released 2019-06-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.2) kernel-3.10.0-327.79.2.el7, kernel-abi-whitelists-3.10.0-327.79.2.el7, kernel-debug-3.10.0-327.79.2.el7 +7
- Red Hat Enterprise Linux Server E4S (v. 7.2) kernel-3.10.0-327.79.2.el7, kernel-abi-whitelists-3.10.0-327.79.2.el7, kernel-debug-3.10.0-327.79.2.el7 +7
- Red Hat Enterprise Linux Server Optional AUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.79.2.el7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.2) kernel-tools-libs-devel-3.10.0-327.79.2.el7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.79.2.el7
- Red Hat Enterprise Linux Server TUS (v. 7.2) kernel-3.10.0-327.79.2.el7, kernel-abi-whitelists-3.10.0-327.79.2.el7, kernel-debug-3.10.0-327.79.2.el7 +7
Fixes 3 records
Priority HIGH 78
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.98745 · Published 2019-06-18 · Fixed in 4.4.182, 4.9.182 +3 CWE-190
Priority HIGH 77
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.94414 · Published 2019-06-18 · Partial fix · 4.4.182, 4.9.182 +3 CWE-770
Priority HIGH 76
Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.91326 · Published 2019-06-18 · Partial fix · 4.4.182, 4.9.182 +3 CWE-405
