Red Hat Security AdvisoryRHSA-2019:1486
kernel-rt security update
Released 2019-06-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Realtime (v. 7) kernel-rt-3.10.0-957.21.3.rt56.935.el7, kernel-rt-debug-3.10.0-957.21.3.rt56.935.el7, kernel-rt-debug-devel-3.10.0-957.21.3.rt56.935.el7 +4
- Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-957.21.3.rt56.935.el7, kernel-rt-debug-3.10.0-957.21.3.rt56.935.el7, kernel-rt-debug-devel-3.10.0-957.21.3.rt56.935.el7 +7
Fixes 3 records
Priority HIGH 78
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.98745 · Published 2019-06-18 · Fixed in 4.4.182, 4.9.182 +3 CWE-190
Priority HIGH 77
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.94414 · Published 2019-06-18 · Partial fix · 4.4.182, 4.9.182 +3 CWE-770
Priority HIGH 76
Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.91326 · Published 2019-06-18 · Partial fix · 4.4.182, 4.9.182 +3 CWE-405
