Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 17

Vulnerabilities 5

• Unscored —
  CVE-2015-8539

  The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (B…

  linux Ubuntu
  Feb 8, 2016
• Unscored —
  CVE-2017-12192

  The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 12, 2017
• Unscored —
  CVE-2017-12193

  The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles n…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Nov 22, 2017
• Unscored —
  CVE-2017-15649 Public exploit

  net/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 19, 2017
• Unscored —
  CVE-2017-7472 Public exploit

  The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumpti…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  May 11, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1284450
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1442086
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1504574
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1519506
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0152.json
• report
  https://access.redhat.com/security/cve/CVE-2015-8539
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-8539
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-8539
• article
  https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=096fe9eaea40a17e125569f9e657e34cdb6d73bd
• report
  https://access.redhat.com/security/cve/CVE-2017-7472
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-7472
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-7472
• report
  https://access.redhat.com/security/cve/CVE-2017-12192
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1493435
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12192
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12192
• article
  http://seclists.org/oss-sec/2017/q4/63
• report
  https://access.redhat.com/security/cve/CVE-2017-12193
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1501215
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12193
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12193
• report
  https://access.redhat.com/security/cve/CVE-2017-15649
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-15649
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-15649