Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Fixed packages 11

Vulnerabilities 10

• Unscored —
  CVE-2013-7421

  The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system …

  linux linux linux-lts-utopic Debian Ubuntu
  Mar 2, 2015
• Unscored —
  CVE-2014-8171

  The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadloc…

  linux Debian
  Feb 9, 2018
• Unscored —
  CVE-2014-9419

  The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 26, 2014
• Unscored —
  CVE-2014-9644

  The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system …

  linux linux linux-lts-utopic Debian Ubuntu
  Mar 2, 2015
• Unscored —
  CVE-2015-2925 Public exploit

  The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions insid…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 16, 2015
• Unscored —
  CVE-2015-3339

  Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain…

  linux linux linux-lts-utopic Debian Ubuntu
  May 27, 2015
• Unscored —
  CVE-2015-4170

  Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-201312…

  linux Debian
  May 2, 2016
• Unscored —
  CVE-2015-5283

  The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-in…

  linux linux linux-lts-utopic linux-lts-vivid Debian Ubuntu
  Oct 19, 2015
• Unscored —
  CVE-2015-7613

  Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges…

  linux linux linux-lts-utopic linux-lts-vivid Debian Ubuntu
  Oct 19, 2015
• Unscored —
  CVE-2015-7837

  The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secu…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 19, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/articles/2055783
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1177260
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1185469
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1190546
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198109
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1209190
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1209367
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1211724
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1214030
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1218879
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1230391
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1230395
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1257528
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1265251
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1268270
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1272472
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2411.json
• report
  https://access.redhat.com/security/cve/CVE-2013-7421
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-7421
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-7421
• report
  https://access.redhat.com/security/cve/CVE-2014-8171
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-8171
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-8171
• report
  https://access.redhat.com/security/cve/CVE-2014-9419
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-9419
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-9419
• report
  https://access.redhat.com/security/cve/CVE-2014-9644
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-9644
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-9644
• report
  https://access.redhat.com/security/cve/CVE-2015-2925
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-2925
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-2925
• report
  https://access.redhat.com/security/cve/CVE-2015-3339
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-3339
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-3339
• report
  https://access.redhat.com/security/cve/CVE-2015-4170
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-4170
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-4170