Red Hat Security AdvisoryRHSA-2019:1602
kernel-alt security update
Released 2019-06-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) kernel-4.14.0-115.8.2.el7a, kernel-abi-whitelists-4.14.0-115.8.2.el7a, kernel-alt-4.14.0-115.8.2.el7a +8
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kernel-debug-devel-4.14.0-115.8.2.el7a, kernel-tools-libs-devel-4.14.0-115.8.2.el7a
Fixes 3 records
Priority HIGH 78
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.98745 · Published 2019-06-18 · Fixed in 4.4.182, 4.9.182 +3 CWE-190
Priority HIGH 77
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.94414 · Published 2019-06-18 · Partial fix · 4.4.182, 4.9.182 +3 CWE-770
Priority HIGH 76
Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.91326 · Published 2019-06-18 · Partial fix · 4.4.182, 4.9.182 +3 CWE-405
