Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 17

Vulnerabilities 9

• Medium 5.1
  CVE-2017-7558

  A kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and s…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 26, 2018
• Unscored —
  CVE-2016-8399

  An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application t…

  Google Android linux-raspi2 linux-hwe Android Debian Ubuntu
  Jan 12, 2017
• Unscored —
  CVE-2017-1000111

  Linux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously disclosed CVE-2016-865…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Oct 4, 2017
• Unscored —
  CVE-2017-1000112 Public exploit EPSS 21%

  Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Oct 4, 2017
• Unscored —
  CVE-2017-11176 Public exploit

  The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the ret…

  linux-raspi2 linux-hwe linux-riscv linux-gcp Debian Ubuntu
  Jul 11, 2017
• Unscored —
  CVE-2017-14106

  The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of s…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 1, 2017
• Unscored —
  CVE-2017-7184 Public exploit

  The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certai…

  linux-raspi2 linux-hwe linux linux-gke Debian Ubuntu
  Mar 19, 2017
• Unscored —
  CVE-2017-7541

  The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel …

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Jul 25, 2017
• Unscored —
  CVE-2017-7542

  The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cau…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Jul 21, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1403833
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1435153
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1470659
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1473198
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1473649
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1479304
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1479307
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1480266
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1487295
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1489084
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2931.json
• report
  https://access.redhat.com/security/cve/CVE-2016-8399
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-8399
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-8399
• report
  https://access.redhat.com/security/cve/CVE-2017-7184
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-7184
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-7184
• report
  https://access.redhat.com/security/cve/CVE-2017-7541
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-7541
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-7541
• report
  https://access.redhat.com/security/cve/CVE-2017-7542
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-7542
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-7542
• report
  https://access.redhat.com/security/cve/CVE-2017-7558
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-7558
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-7558
• report
  https://access.redhat.com/security/cve/CVE-2017-11176
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-11176
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-11176
• report
  https://access.redhat.com/security/cve/CVE-2017-14106
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-14106
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-14106
• report
  https://access.redhat.com/security/cve/CVE-2017-1000111
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-1000111
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-1000111
• report
  https://access.redhat.com/security/cve/CVE-2017-1000112
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-1000112
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-1000112