RHSA-2018:0676 — Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Fixed packages 17

Release	Package	Fixed in
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debug	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debug-debuginfo	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debug-devel	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debug-kvm	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debug-kvm-debuginfo	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debuginfo	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debuginfo-common-x86_64	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-devel	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-doc	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-kvm	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-kvm-debuginfo	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-trace	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-trace-debuginfo	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-trace-devel	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-trace-kvm	0:3.10.0-862.rt56.804.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-trace-kvm-debuginfo	0:3.10.0-862.rt56.804.el7

Vulnerabilities 29

Unscored —

CVE-2016-3672 Public exploit

The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 27, 2016
Unscored —

CVE-2016-7913

The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users…

linux-raspi2 linux-riscv linux linux-gke Debian Ubuntu

Nov 16, 2016
Unscored —

CVE-2016-8633

drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote atta…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 28, 2016
Unscored —

CVE-2017-1000252

The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion fail…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 26, 2017
Unscored —

CVE-2017-1000407

The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exceptio…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 11, 2017
Unscored —

CVE-2017-1000410

The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP comm…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 7, 2017
Unscored —

CVE-2017-12154

The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Sep 26, 2017
Unscored —

CVE-2017-12190

The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcou…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Nov 22, 2017
Unscored —

CVE-2017-13166

An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. An…

Google Android linux-raspi2 linux-hwe Android Debian Ubuntu

Dec 6, 2017
Unscored —

CVE-2017-13305

A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kerne…

Google Android linux-raspi2 linux-hwe Android Debian Ubuntu

Apr 4, 2018
Unscored —

CVE-2017-14140

The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the tar…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 5, 2017
Unscored —

CVE-2017-15116

The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service …

linux-raspi2 linux-riscv linux linux-gke Linux Debian Ubuntu

Nov 30, 2017
Unscored —

CVE-2017-15121

A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a …

Red Hat Red Hat Enterprise Linux linux Linux Debian

Dec 6, 2017
Unscored —

CVE-2017-15126

A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the hand…

linux-azure linux Linux Debian Ubuntu

Jan 14, 2018
Unscored —

CVE-2017-15127

A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluou…

linux-azure linux Linux Debian Ubuntu

Jan 14, 2018
Unscored —

CVE-2017-15129

A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The func…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Jan 9, 2018
Unscored —

CVE-2017-15265

Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Oct 16, 2017
Unscored —

CVE-2017-15274

security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction wi…

linux-raspi2 linux-hwe linux-riscv linux-gcp Debian Ubuntu

Oct 12, 2017
Unscored —

CVE-2017-17448

net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 7, 2017
Unscored —

CVE-2017-17449

The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMO…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 7, 2017
Unscored —

CVE-2017-17558

The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel throu…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 12, 2017
Unscored —

CVE-2017-18017 EPSS 53%

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36…

linux-raspi2 linux-hwe linux-riscv linux-gcp Debian Ubuntu

Jan 3, 2018
Unscored —

CVE-2017-18203

The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a deni…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 27, 2018
Unscored —

CVE-2017-7294

The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 doe…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 29, 2017
Unscored —

CVE-2017-8824 Public exploit

The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileg…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Dec 5, 2017
Unscored —

CVE-2017-9725

In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong dat…

linux-raspi2 linux-azure linux-riscv linux-gcp Debian Ubuntu

Sep 21, 2017
Unscored —

CVE-2018-1000004

In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound sy…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jan 16, 2018
Unscored —

CVE-2018-5750

The acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows local users to obtain…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jan 26, 2018
Unscored —

CVE-2018-6927

The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 12, 2018

References

article
https://access.redhat.com/security/updates/classification/#important
article
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.5_Release_Notes/index.html
report
https://bugzilla.redhat.com/show_bug.cgi?id=1292927
report
https://bugzilla.redhat.com/show_bug.cgi?id=1324749
report
https://bugzilla.redhat.com/show_bug.cgi?id=1391490
report
https://bugzilla.redhat.com/show_bug.cgi?id=1401061
report
https://bugzilla.redhat.com/show_bug.cgi?id=1402885
report
https://bugzilla.redhat.com/show_bug.cgi?id=1430418
report
https://bugzilla.redhat.com/show_bug.cgi?id=1436798
report
https://bugzilla.redhat.com/show_bug.cgi?id=1448770
report
https://bugzilla.redhat.com/show_bug.cgi?id=1452589
report
https://bugzilla.redhat.com/show_bug.cgi?id=1462329
report
https://bugzilla.redhat.com/show_bug.cgi?id=1488329
report
https://bugzilla.redhat.com/show_bug.cgi?id=1489088
report
https://bugzilla.redhat.com/show_bug.cgi?id=1490781
report
https://bugzilla.redhat.com/show_bug.cgi?id=1491224
report
https://bugzilla.redhat.com/show_bug.cgi?id=1495089
report
https://bugzilla.redhat.com/show_bug.cgi?id=1500894
report
https://bugzilla.redhat.com/show_bug.cgi?id=1501878
report
https://bugzilla.redhat.com/show_bug.cgi?id=1503749
report
https://bugzilla.redhat.com/show_bug.cgi?id=1506255
report
https://bugzilla.redhat.com/show_bug.cgi?id=1507270
report
https://bugzilla.redhat.com/show_bug.cgi?id=1509264
report
https://bugzilla.redhat.com/show_bug.cgi?id=1514609
report
https://bugzilla.redhat.com/show_bug.cgi?id=1518274
report
https://bugzilla.redhat.com/show_bug.cgi?id=1518638
report
https://bugzilla.redhat.com/show_bug.cgi?id=1519160
report
https://bugzilla.redhat.com/show_bug.cgi?id=1519591
report
https://bugzilla.redhat.com/show_bug.cgi?id=1520328
report
https://bugzilla.redhat.com/show_bug.cgi?id=1520893
report
https://bugzilla.redhat.com/show_bug.cgi?id=1523481
report
https://bugzilla.redhat.com/show_bug.cgi?id=1525218
report
https://bugzilla.redhat.com/show_bug.cgi?id=1525474
report
https://bugzilla.redhat.com/show_bug.cgi?id=1525762
report
https://bugzilla.redhat.com/show_bug.cgi?id=1525768
report
https://bugzilla.redhat.com/show_bug.cgi?id=1531135
report
https://bugzilla.redhat.com/show_bug.cgi?id=1531174
report
https://bugzilla.redhat.com/show_bug.cgi?id=1535315
report
https://bugzilla.redhat.com/show_bug.cgi?id=1539706

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Fixed packages 17

Vulnerabilities 29

The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize …

The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users…

drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote atta…

The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion fail…

The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exceptio…

The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP comm…

The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load…

The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcou…

An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. An…

A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kerne…

The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the tar…

The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service …

A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a …

A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the hand…

A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluou…

A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The func…

Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service …

security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction wi…

net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for…

The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMO…

The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel throu…

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36…

The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a deni…

The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 doe…

The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileg…

In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong dat…

In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound sy…

The acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows local users to obtain…

The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial…

References