Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 15

Vulnerabilities 25

• Medium 4.4
  CVE-2016-9604

  It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as …

  kernel security linux-raspi2 linux-hwe Debian Ubuntu
  Jul 11, 2018
• Unscored —
  CVE-2015-8839

  Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to caus…

  linux-raspi2 linux-riscv linux linux-gke Debian Ubuntu
  May 2, 2016
• Unscored —
  CVE-2016-10088

  The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where t…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 30, 2016
• Unscored —
  CVE-2016-10741

  In the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause a denial of service (system crash) beca…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Feb 1, 2019
• Unscored —
  CVE-2016-7042

  The proc_keys_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection…

  linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu
  Oct 16, 2016
• Unscored —
  CVE-2016-7097

  The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 16, 2016
• Unscored —
  CVE-2016-8645

  The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial o…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 28, 2016
• Unscored —
  CVE-2016-9576

  The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the ty…

  linux-raspi2 linux-hwe linux linux Debian Ubuntu
  Dec 28, 2016
• Unscored —
  CVE-2016-9685

  Multiple memory leaks in error paths in fs/xfs/xfs_attr_list.c in the Linux kernel before 4.5.1 allow local users to ca…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 28, 2016
• Unscored —
  CVE-2016-9806

  Race condition in the netlink_dump function in net/netlink/af_netlink.c in the Linux kernel before 4.6.3 allows local u…

  linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu
  Dec 28, 2016
• Unscored —
  CVE-2017-2671 Public exploit

  The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock …

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Apr 5, 2017
• Unscored —
  CVE-2017-5551

  The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxat…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Feb 6, 2017
• Unscored —
  CVE-2017-5970

  The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel through 4.9.9 allows attackers to cause…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Feb 14, 2017
• Unscored —
  CVE-2017-6001

  Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a cra…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Feb 18, 2017
• Unscored —
  CVE-2017-6951

  The keyring_search_aux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to ca…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 16, 2017
• Unscored —
  CVE-2017-7187

  The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of s…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 20, 2017
• Unscored —
  CVE-2017-7495

  fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles a needs-flushing-befo…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  May 15, 2017
• Unscored —
  CVE-2017-7533 Public exploit

  Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges …

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Aug 5, 2017
• Unscored —
  CVE-2017-7889

  The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanis…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Apr 17, 2017
• Unscored —
  CVE-2017-8797

  The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4…

  linux-raspi2 linux-hwe linux-riscv linux-gcp Debian Ubuntu
  Jul 2, 2017
• Unscored —
  CVE-2017-8890 Public exploit

  The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attacker…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 10, 2017
• Unscored —
  CVE-2017-9074

  The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may b…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  May 19, 2017
• Unscored —
  CVE-2017-9075

  The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whi…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  May 19, 2017
• Unscored —
  CVE-2017-9076

  The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, wh…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  May 19, 2017
• Unscored —
  CVE-2017-9077

  The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whi…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  May 19, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/articles/3173821
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1323577
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1368938
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1373966
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1389433
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1393904
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1396941
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1401502
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1403145
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1412210
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1421638
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1422825
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1433252
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1434327
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1436649
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1444493
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1450972
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1452679
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1452688
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1452691
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1452744
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1466329
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1468283
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1479016
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2669.json
• report
  https://access.redhat.com/security/cve/CVE-2015-8839
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-8839
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-8839
• report
  https://access.redhat.com/security/cve/CVE-2016-7042
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-7042
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-7042
• report
  https://access.redhat.com/security/cve/CVE-2016-7097
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-7097
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-7097
• report
  https://access.redhat.com/security/cve/CVE-2016-8645
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-8645
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-8645
• report
  https://access.redhat.com/security/cve/CVE-2016-9576