Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Fixed packages 17

Vulnerabilities 36

• Medium 4.4
  CVE-2016-9604

  It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as …

  kernel security linux-raspi2 linux-hwe Debian Ubuntu
  Jul 11, 2018
• Unscored —
  CVE-2014-7970

  The pivot_root implementation in fs/namespace.c in the Linux kernel through 3.17 does not properly interact with certai…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 13, 2014
• Unscored —
  CVE-2014-7975

  The do_umount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAP_SYS_ADMIN capability…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 13, 2014
• Unscored —
  CVE-2015-8839

  Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to caus…

  linux-raspi2 linux-riscv linux linux-gke Debian Ubuntu
  May 2, 2016
• Unscored —
  CVE-2015-8970

  crypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on …

  linux-raspi2 linux-riscv linux linux-gke Debian Ubuntu
  Nov 28, 2016
• Unscored —
  CVE-2016-10088

  The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where t…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 30, 2016
• Unscored —
  CVE-2016-10147

  crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer derefe…

  linux-raspi2 linux-hwe linux linux Debian Ubuntu
  Jan 18, 2017
• Unscored —
  CVE-2016-10200

  Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain priv…

  linux-raspi2 linux-hwe linux linux Debian Ubuntu
  Mar 7, 2017
• Unscored —
  CVE-2016-10741

  In the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause a denial of service (system crash) beca…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Feb 1, 2019
• Unscored —
  CVE-2016-6213

  fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which a…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 28, 2016
• Unscored —
  CVE-2016-7042

  The proc_keys_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection…

  linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu
  Oct 16, 2016
• Unscored —
  CVE-2016-7097

  The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 16, 2016
• Unscored —
  CVE-2016-8645

  The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial o…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 28, 2016
• Unscored —
  CVE-2016-9576

  The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the ty…

  linux-raspi2 linux-hwe linux linux Debian Ubuntu
  Dec 28, 2016
• Unscored —
  CVE-2016-9588

  arch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanages the #BP and #OF exceptions, which allows guest OS users t…

  linux-raspi2 linux-riscv linux linux-gke Debian Ubuntu
  Dec 28, 2016
• Unscored —
  CVE-2016-9685

  Multiple memory leaks in error paths in fs/xfs/xfs_attr_list.c in the Linux kernel before 4.5.1 allow local users to ca…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 28, 2016
• Unscored —
  CVE-2016-9806

  Race condition in the netlink_dump function in net/netlink/af_netlink.c in the Linux kernel before 4.6.3 allows local u…

  linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu
  Dec 28, 2016
• Unscored —
  CVE-2017-2584

  arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Jan 15, 2017
• Unscored —
  CVE-2017-2596

  The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMX…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Feb 6, 2017
• Unscored —
  CVE-2017-2647

  The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (…

  linux-raspi2 linux-riscv linux linux-gke Debian Ubuntu
  Mar 31, 2017
• Unscored —
  CVE-2017-2671 Public exploit

  The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock …

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Apr 5, 2017
• Unscored —
  CVE-2017-5551

  The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxat…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Feb 6, 2017
• Unscored —
  CVE-2017-5970

  The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel through 4.9.9 allows attackers to cause…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Feb 14, 2017
• Unscored —
  CVE-2017-6001

  Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a cra…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Feb 18, 2017
• Unscored —
  CVE-2017-6951

  The keyring_search_aux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to ca…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 16, 2017
• Unscored —
  CVE-2017-7187

  The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of s…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 20, 2017
• Unscored —
  CVE-2017-7495

  fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles a needs-flushing-befo…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  May 15, 2017
• Unscored —
  CVE-2017-7616

  Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Apr 10, 2017
• Unscored —
  CVE-2017-7889

  The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanis…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Apr 17, 2017
• Unscored —
  CVE-2017-8797

  The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4…

  linux-raspi2 linux-hwe linux-riscv linux-gcp Debian Ubuntu
  Jul 2, 2017
• Unscored —
  CVE-2017-8890 Public exploit

  The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attacker…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 10, 2017
• Unscored —
  CVE-2017-9074

  The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may b…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  May 19, 2017
• Unscored —
  CVE-2017-9075

  The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whi…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  May 19, 2017
• Unscored —
  CVE-2017-9076

  The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, wh…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  May 19, 2017
• Unscored —
  CVE-2017-9077

  The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whi…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  May 19, 2017
• Unscored —
  CVE-2017-9242

  The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too late in checking whet…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  May 27, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1151095
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1151108
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1323577
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1356471
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1368938
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1373966
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1377840
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1378172
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386286
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1389215
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1389433
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1393904
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1396941
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1400188
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1401502
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1403145
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1404200
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1404924
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1412210
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414052
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1417812
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1421638
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1421801
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1421810
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1422825
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1425780
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1426661
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1427626
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1427647
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1427991
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1428353
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1428890
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1428943
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1429610
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1429640
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1429951
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1429977