Red Hat Security Advisory: kernel-alt security, bug fix, and enhancement update

Fixed packages 25

Vulnerabilities 14

• Medium 5.6
  CVE-2017-5753 Public exploit EPSS 94%

  Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of…

  Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jan 4, 2018
• Unscored —
  CVE-2017-1000255

  On Linux running on PowerPC hardware (Power8 or later) a user process can craft a signal frame and then do a sigreturn …

  linux-hwe linux Debian Ubuntu
  Oct 30, 2017
• Unscored —
  CVE-2017-1000410

  The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP comm…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 7, 2017
• Unscored —
  CVE-2017-11473

  Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 20, 2017
• Unscored —
  CVE-2017-12190

  The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcou…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Nov 22, 2017
• Unscored —
  CVE-2017-12192

  The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 12, 2017
• Unscored —
  CVE-2017-15129

  A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The func…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Jan 9, 2018
• Unscored —
  CVE-2017-15299

  The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that already exists but is un…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 14, 2017
• Unscored —
  CVE-2017-15306

  The kvm_vm_ioctl_check_extension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 6, 2017
• Unscored —
  CVE-2017-16939 Public exploit

  The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to ga…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 24, 2017
• Unscored —
  CVE-2017-17448

  net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 7, 2017
• Unscored —
  CVE-2017-17449

  The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMO…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 7, 2017
• Unscored —
  CVE-2018-1000004

  In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound sy…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 16, 2018
• Unscored —
  CVE-2018-6927

  The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Feb 12, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.5_Release_Notes/index.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1473209
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1495089
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1498016
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1498067
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1501794
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1519160
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1519778
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1519780
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1519781
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1525762
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1525768
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1531174
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1535315
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1544612
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0654.json
• report
  https://access.redhat.com/security/cve/CVE-2017-5753
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5753
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5753
• article
  https://access.redhat.com/security/vulnerabilities/speculativeexecution
• article
  https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html
• article
  https://meltdownattack.com
• article
  https://spectreattack.com/
• report
  https://access.redhat.com/security/cve/CVE-2017-11473
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-11473
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-11473
• report
  https://access.redhat.com/security/cve/CVE-2017-12190
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12190
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12190
• report
  https://access.redhat.com/security/cve/CVE-2017-12192
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1493435
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12192
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12192
• article
  http://seclists.org/oss-sec/2017/q4/63
• report
  https://access.redhat.com/security/cve/CVE-2017-15129
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-15129
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-15129
• report
  https://access.redhat.com/security/cve/CVE-2017-15299