Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 43

Vulnerabilities 9

• Medium 5.6
  CVE-2017-5715 Public exploit EPSS 73%

  Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

  Intel Microprocessors with Speculative Execution linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jan 4, 2018
• Unscored —
  CVE-2017-1000252

  The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion fail…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 26, 2017
• Unscored —
  CVE-2017-1000410

  The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP comm…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 7, 2017
• Unscored —
  CVE-2017-13166

  An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. An…

  Google Android linux-raspi2 linux-hwe Android Debian Ubuntu
  Dec 6, 2017
• Unscored —
  CVE-2017-15265

  Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 16, 2017
• Unscored —
  CVE-2017-17449

  The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMO…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 7, 2017
• Unscored —
  CVE-2017-18017 EPSS 53%

  The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36…

  linux-raspi2 linux-hwe linux-riscv linux-gcp Debian Ubuntu
  Jan 3, 2018
• Unscored —
  CVE-2017-8824 Public exploit

  The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileg…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Dec 5, 2017
• Unscored —
  CVE-2017-9725

  In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong dat…

  linux-raspi2 linux-azure linux-riscv linux-gcp Debian Ubuntu
  Sep 21, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/articles/3411331
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1489088
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1490781
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1501878
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1519160
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1519591
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1525762
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1531135
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1548412
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1130.json
• report
  https://access.redhat.com/security/cve/CVE-2017-5715
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1519780
• article
  https://access.redhat.com/security/vulnerabilities/speculativeexecution
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5715
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5715
• article
  https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html
• article
  https://meltdownattack.com
• article
  https://spectreattack.com/
• report
  https://access.redhat.com/security/cve/CVE-2017-8824
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-8824
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-8824
• report
  https://access.redhat.com/security/cve/CVE-2017-9725
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-9725
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-9725
• article
  https://source.android.com/security/bulletin/2017-09-01
• report
  https://access.redhat.com/security/cve/CVE-2017-13166
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-13166
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-13166
• report
  https://access.redhat.com/security/cve/CVE-2017-15265
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-15265
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-15265
• report
  https://access.redhat.com/security/cve/CVE-2017-17449
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-17449
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-17449
• report
  https://access.redhat.com/security/cve/CVE-2017-18017
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-18017
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-18017
• report
  https://access.redhat.com/security/cve/CVE-2017-1000252