RHSA-2016:2584 — Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Fixed packages 17

Release	Package	Fixed in
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debug	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debug-debuginfo	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debug-devel	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debug-kvm	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debug-kvm-debuginfo	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debuginfo	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debuginfo-common-x86_64	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-devel	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-doc	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-kvm	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-kvm-debuginfo	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-trace	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-trace-debuginfo	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-trace-devel	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-trace-kvm	0:3.10.0-514.rt56.420.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-trace-kvm-debuginfo	0:3.10.0-514.rt56.420.el7

Vulnerabilities 27

Unscored —

CVE-2013-4312

The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 8, 2016
Unscored —

CVE-2015-8374

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obt…

linux linux linux-lts-utopic linux-lts-vivid Debian Ubuntu

Dec 28, 2015
Unscored —

CVE-2015-8543 Public exploit

The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not valida…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 28, 2015
Unscored —

CVE-2015-8746

fs/nfs/nfs4proc.c in the NFS client in the Linux kernel before 4.2.2 does not properly initialize memory for migration …

linux linux linux-lts-utopic linux-lts-vivid Debian Ubuntu

May 2, 2016
Unscored —

CVE-2015-8812 EPSS 15%

drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which…

linux linux linux-lts-utopic linux-lts-vivid Debian Ubuntu

Apr 27, 2016
Unscored —

CVE-2015-8844

The signal implementation in the Linux kernel before 4.3.5 on powerpc platforms does not check for an MSR with both the…

linux linux linux-lts-utopic linux-lts-vivid Debian Ubuntu

Apr 27, 2016
Unscored —

CVE-2015-8845

The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms d…

linux linux linux-lts-utopic linux-lts-vivid Debian Ubuntu

Apr 27, 2016
Unscored —

CVE-2015-8956

The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtai…

linux Debian

Oct 10, 2016
Unscored —

CVE-2016-2053

The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel before 4.3 allows attackers to cause a denial o…

linux linux linux-lts-utopic linux-lts-vivid Debian Ubuntu

May 2, 2016
Unscored —

CVE-2016-2069

Race condition in arch/x86/mm/tlb.c in the Linux kernel before 4.4.1 allows local users to gain privileges by triggerin…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 27, 2016
Unscored —

CVE-2016-2117

The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enabl…

linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu

May 2, 2016
Unscored —

CVE-2016-2384 Public exploit

Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 27, 2016
Unscored —

CVE-2016-2847

fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 27, 2016
Unscored —

CVE-2016-3070

The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improp…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 6, 2016
Unscored —

CVE-2016-3156

The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest O…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 27, 2016
Unscored —

CVE-2016-3699

The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure…

Oct 7, 2016
Unscored —

CVE-2016-3841

The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or…

linux linux linux-lts-utopic linux-lts-vivid Debian Ubuntu

Aug 6, 2016
Unscored —

CVE-2016-4569

The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 23, 2016
Unscored —

CVE-2016-4578 Public exploit

sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local u…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 23, 2016
Unscored —

CVE-2016-4581

fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case invol…

linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu

May 23, 2016
Unscored —

CVE-2016-4794

Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of ser…

linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu

May 23, 2016
Unscored —

CVE-2016-5829

Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the Linux ker…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jun 27, 2016
Unscored —

CVE-2016-6136

Race condition in the audit_log_single_execve_arg function in kernel/auditsc.c in the Linux kernel through 4.7 allows l…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 6, 2016
Unscored —

CVE-2016-6198

The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is r…

linux-raspi2 linux-riscv linux linux-gke Debian Ubuntu

Aug 6, 2016
Unscored —

CVE-2016-6327

drivers/infiniband/ulp/srpt/ib_srpt.c in the Linux kernel before 4.5.1 allows local users to cause a denial of service …

linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu

Oct 16, 2016
Unscored —

CVE-2016-6480

Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows…

linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu

Aug 6, 2016
Unscored —

CVE-2017-13167

An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Android kernel. Android …

Google Android linux-raspi2 linux-riscv Android Debian Ubuntu

Dec 6, 2017

References

article
https://access.redhat.com/security/updates/classification/#important
article
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html
report
https://bugzilla.redhat.com/show_bug.cgi?id=1250750
report
https://bugzilla.redhat.com/show_bug.cgi?id=1280465
report
https://bugzilla.redhat.com/show_bug.cgi?id=1280494
report
https://bugzilla.redhat.com/show_bug.cgi?id=1286261
report
https://bugzilla.redhat.com/show_bug.cgi?id=1290475
report
https://bugzilla.redhat.com/show_bug.cgi?id=1292902
report
https://bugzilla.redhat.com/show_bug.cgi?id=1295802
report
https://bugzilla.redhat.com/show_bug.cgi?id=1297813
report
https://bugzilla.redhat.com/show_bug.cgi?id=1300237
report
https://bugzilla.redhat.com/show_bug.cgi?id=1301893
report
https://bugzilla.redhat.com/show_bug.cgi?id=1303532
report
https://bugzilla.redhat.com/show_bug.cgi?id=1303733
report
https://bugzilla.redhat.com/show_bug.cgi?id=1304491
report
https://bugzilla.redhat.com/show_bug.cgi?id=1308444
report
https://bugzilla.redhat.com/show_bug.cgi?id=1308846
report
https://bugzilla.redhat.com/show_bug.cgi?id=1312298
report
https://bugzilla.redhat.com/show_bug.cgi?id=1313428
report
https://bugzilla.redhat.com/show_bug.cgi?id=1318172
report
https://bugzilla.redhat.com/show_bug.cgi?id=1320167
report
https://bugzilla.redhat.com/show_bug.cgi?id=1325404
report
https://bugzilla.redhat.com/show_bug.cgi?id=1326472
report
https://bugzilla.redhat.com/show_bug.cgi?id=1326540
report
https://bugzilla.redhat.com/show_bug.cgi?id=1328607
report
https://bugzilla.redhat.com/show_bug.cgi?id=1329653
report
https://bugzilla.redhat.com/show_bug.cgi?id=1331562
report
https://bugzilla.redhat.com/show_bug.cgi?id=1332295
report
https://bugzilla.redhat.com/show_bug.cgi?id=1332593
report
https://bugzilla.redhat.com/show_bug.cgi?id=1333712
report
https://bugzilla.redhat.com/show_bug.cgi?id=1334643
report
https://bugzilla.redhat.com/show_bug.cgi?id=1335215
report
https://bugzilla.redhat.com/show_bug.cgi?id=1335889
report
https://bugzilla.redhat.com/show_bug.cgi?id=1337643
report
https://bugzilla.redhat.com/show_bug.cgi?id=1340922
report
https://bugzilla.redhat.com/show_bug.cgi?id=1343656
report
https://bugzilla.redhat.com/show_bug.cgi?id=1344077
report
https://bugzilla.redhat.com/show_bug.cgi?id=1350509
report
https://bugzilla.redhat.com/show_bug.cgi?id=1353533

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Fixed packages 17

Vulnerabilities 27

The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory…

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obt…

The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not valida…

fs/nfs/nfs4proc.c in the NFS client in the Linux kernel before 4.2.2 does not properly initialize memory for migration …

drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which…

The signal implementation in the Linux kernel before 4.3.5 on powerpc platforms does not check for an MSR with both the…

The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms d…

The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtai…

The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel before 4.3 allows attackers to cause a denial o…

Race condition in arch/x86/mm/tlb.c in the Linux kernel before 4.4.1 allows local users to gain privileges by triggerin…

The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enabl…

Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows …

fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to…

The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improp…

The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest O…

The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure…

The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or…

The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain …

sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local u…

fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case invol…

Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of ser…

Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the Linux ker…

Race condition in the audit_log_single_execve_arg function in kernel/auditsc.c in the Linux kernel through 4.7 allows l…

The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is r…

drivers/infiniband/ulp/srpt/ib_srpt.c in the Linux kernel before 4.5.1 allows local users to cause a denial of service …

Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows…

An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Android kernel. Android …

References