Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 17

Vulnerabilities 7

• Unscored —
  CVE-2017-1000364 Public exploit

  An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not suffici…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Jun 19, 2017
• Unscored —
  CVE-2017-1000379 Public exploit

  The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Jun 19, 2017
• Unscored —
  CVE-2017-2583

  The load_segment_descriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4.9.5 improperly emulat…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Feb 6, 2017
• Unscored —
  CVE-2017-6214

  The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a den…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Feb 23, 2017
• Unscored —
  CVE-2017-7477

  Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows atta…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Apr 25, 2017
• Unscored —
  CVE-2017-7645

  The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a den…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Apr 18, 2017
• Unscored —
  CVE-2017-7895 EPSS 11%

  The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buf…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Apr 28, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414735
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1426542
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443615
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1445207
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1446103
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1452742
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1455239
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1461333
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1616.json
• report
  https://access.redhat.com/security/cve/CVE-2017-2583
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-2583
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-2583
• report
  https://access.redhat.com/security/cve/CVE-2017-6214
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-6214
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-6214
• report
  https://access.redhat.com/security/cve/CVE-2017-7477
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-7477
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-7477
• report
  https://access.redhat.com/security/cve/CVE-2017-7645
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-7645
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-7645
• report
  https://access.redhat.com/security/cve/CVE-2017-7895
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-7895
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-7895
• report
  https://access.redhat.com/security/cve/CVE-2017-1000364
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-1000364
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-1000364
• article
  https://access.redhat.com/security/vulnerabilities/stackguard
• article
  https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
• report
  https://access.redhat.com/security/cve/CVE-2017-1000379
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1462165
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-1000379
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-1000379