Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 79

Vulnerabilities 6

• Medium 5.6
  CVE-2017-5753 Public exploit EPSS 94%

  Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of…

  Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jan 4, 2018
• Unscored —
  CVE-2015-8539

  The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (B…

  linux Ubuntu
  Feb 8, 2016
• Unscored —
  CVE-2017-12192

  The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 12, 2017
• Unscored —
  CVE-2017-12193

  The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles n…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Nov 22, 2017
• Unscored —
  CVE-2017-15649 Public exploit

  net/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 19, 2017
• Unscored —
  CVE-2017-7472 Public exploit

  The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumpti…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  May 11, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/security/vulnerabilities/speculativeexecution
• report
  https://access.redhat.com/security/cve/CVE-2017-5753
• article
  https://access.redhat.com/security/cve/CVE-2017-5715
• article
  https://access.redhat.com/security/cve/CVE-2017-5754
• article
  https://access.redhat.com/articles/3327131
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1284450
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1442086
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1493435
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1501215
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1504574
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1519778
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1519780
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1519781
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0151.json
• report
  https://access.redhat.com/security/cve/CVE-2015-8539
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-8539
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-8539
• article
  https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=096fe9eaea40a17e125569f9e657e34cdb6d73bd
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5753
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5753
• article
  https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html
• article
  https://meltdownattack.com
• article
  https://spectreattack.com/
• report
  https://access.redhat.com/security/cve/CVE-2017-7472
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-7472
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-7472
• report
  https://access.redhat.com/security/cve/CVE-2017-12192
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12192
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12192
• article
  http://seclists.org/oss-sec/2017/q4/63
• report
  https://access.redhat.com/security/cve/CVE-2017-12193
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12193
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12193
• report
  https://access.redhat.com/security/cve/CVE-2017-15649
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-15649
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-15649