RHSA-2017:0817 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 70

Release	Package	Fixed in
Red Hat · RHEL 6 enterprise_linux:6::client	kernel	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-abi-whitelists	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debug	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debug-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debug-devel	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debuginfo-common-i686	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debuginfo-common-x86_64	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-devel	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-doc	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-firmware	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-headers	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::client	perf	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::client	perf-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::client	python-perf	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::client	python-perf-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-abi-whitelists	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debug	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debug-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debug-devel	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debuginfo-common-i686	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debuginfo-common-x86_64	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-devel	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-doc	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-firmware	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-headers	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	perf	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	perf-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	python-perf	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	python-perf-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-abi-whitelists	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-bootwrapper	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debug	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debug-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debug-devel	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-i686	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-ppc64	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-s390x	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-x86_64	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-devel	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-doc	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-firmware	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-headers	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-kdump	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-kdump-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-kdump-devel	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	perf	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	perf-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	python-perf	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::server	python-perf-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-abi-whitelists	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debug	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debug-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debug-devel	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debuginfo-common-i686	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debuginfo-common-x86_64	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-devel	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-doc	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-firmware	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-headers	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	perf	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	perf-debuginfo	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	python-perf	0:2.6.32-696.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	python-perf-debuginfo	0:2.6.32-696.el6

Vulnerabilities 10

Unscored —

CVE-2016-10088

The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where t…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 30, 2016
Unscored —

CVE-2016-10142

An issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too Big (PTB) messages. (The scope o…

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

Jan 14, 2017
Unscored —

CVE-2016-2069

Race condition in arch/x86/mm/tlb.c in the Linux kernel before 4.4.1 allows local users to gain privileges by triggerin…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 27, 2016
Unscored —

CVE-2016-2384 Public exploit

Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 27, 2016
Unscored —

CVE-2016-6480

Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows…

linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu

Aug 6, 2016
Unscored —

CVE-2016-7042

The proc_keys_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection…

linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu

Oct 16, 2016
Unscored —

CVE-2016-7097

The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Oct 16, 2016
Unscored —

CVE-2016-8399

An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application t…

Google Android linux-raspi2 linux-hwe Android Debian Ubuntu

Jan 12, 2017
Unscored —

CVE-2016-9576

The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the ty…

linux-raspi2 linux-hwe linux linux Debian Ubuntu

Dec 28, 2016
Unscored —

CVE-2017-5551

The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxat…

linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu

Feb 6, 2017

References

article
https://access.redhat.com/security/updates/classification/#moderate
article
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Release_Notes/index.html
article
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Technical_Notes/index.html
report
https://bugzilla.redhat.com/show_bug.cgi?id=847106
report
https://bugzilla.redhat.com/show_bug.cgi?id=1301893
report
https://bugzilla.redhat.com/show_bug.cgi?id=1308444
report
https://bugzilla.redhat.com/show_bug.cgi?id=1325766
report
https://bugzilla.redhat.com/show_bug.cgi?id=1362466
report
https://bugzilla.redhat.com/show_bug.cgi?id=1368938
report
https://bugzilla.redhat.com/show_bug.cgi?id=1373966
report
https://bugzilla.redhat.com/show_bug.cgi?id=1403145
report
https://bugzilla.redhat.com/show_bug.cgi?id=1403833
report
https://bugzilla.redhat.com/show_bug.cgi?id=1412210
report
https://bugzilla.redhat.com/show_bug.cgi?id=1415908
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0817.json
report
https://access.redhat.com/security/cve/CVE-2016-2069
advisory
https://www.cve.org/CVERecord?id=CVE-2016-2069
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-2069
article
http://seclists.org/oss-sec/2016/q1/194
report
https://access.redhat.com/security/cve/CVE-2016-2384
advisory
https://www.cve.org/CVERecord?id=CVE-2016-2384
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-2384
article
http://seclists.org/oss-sec/2016/q1/331
article
https://lkml.org/lkml/2016/2/13/11
report
https://access.redhat.com/security/cve/CVE-2016-6480
advisory
https://www.cve.org/CVERecord?id=CVE-2016-6480
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-6480
report
https://access.redhat.com/security/cve/CVE-2016-7042
advisory
https://www.cve.org/CVERecord?id=CVE-2016-7042
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-7042
report
https://access.redhat.com/security/cve/CVE-2016-7097
advisory
https://www.cve.org/CVERecord?id=CVE-2016-7097
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-7097
report
https://access.redhat.com/security/cve/CVE-2016-8399
advisory
https://www.cve.org/CVERecord?id=CVE-2016-8399
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-8399
report
https://access.redhat.com/security/cve/CVE-2016-9576
advisory
https://www.cve.org/CVERecord?id=CVE-2016-9576
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-9576

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 70

Vulnerabilities 10

The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where t…

An issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too Big (PTB) messages. (The scope o…

Race condition in arch/x86/mm/tlb.c in the Linux kernel before 4.4.1 allows local users to gain privileges by triggerin…

Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows …

Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows…

The proc_keys_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection…

The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which …

An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application t…

The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the ty…

The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxat…

References