RHSA-2018:1319 — Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 70

Release	Package	Fixed in
Red Hat · RHEL 6 enterprise_linux:6::client	kernel	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-abi-whitelists	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debug	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debug-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debug-devel	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debuginfo-common-i686	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debuginfo-common-x86_64	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-devel	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-doc	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-firmware	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-headers	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::client	perf	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::client	perf-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::client	python-perf	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::client	python-perf-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-abi-whitelists	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debug	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debug-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debug-devel	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debuginfo-common-i686	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debuginfo-common-x86_64	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-devel	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-doc	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-firmware	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-headers	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	perf	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	perf-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	python-perf	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	python-perf-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-abi-whitelists	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-bootwrapper	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debug	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debug-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debug-devel	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-i686	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-ppc64	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-s390x	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-x86_64	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-devel	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-doc	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-firmware	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-headers	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-kdump	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-kdump-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-kdump-devel	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	perf	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	perf-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	python-perf	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::server	python-perf-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-abi-whitelists	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debug	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debug-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debug-devel	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debuginfo-common-i686	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debuginfo-common-x86_64	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-devel	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-doc	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-firmware	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-headers	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	perf	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	perf-debuginfo	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	python-perf	0:2.6.32-696.28.1.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	python-perf-debuginfo	0:2.6.32-696.28.1.el6

Vulnerabilities 8

Medium 5.6

CVE-2017-5715 Public exploit EPSS 73%

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

Intel Microprocessors with Speculative Execution linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jan 4, 2018
Medium 5.6

CVE-2017-5754 Public exploit EPSS 67%

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jan 4, 2018
Unscored —

CVE-2017-1000410

The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP comm…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 7, 2017
Unscored —

CVE-2017-13166

An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. An…

Google Android linux-raspi2 linux-hwe Android Debian Ubuntu

Dec 6, 2017
Unscored —

CVE-2017-18017 EPSS 53%

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36…

linux-raspi2 linux-hwe linux-riscv linux-gcp Debian Ubuntu

Jan 3, 2018
Unscored —

CVE-2017-7645

The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a den…

linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu

Apr 18, 2017
Unscored —

CVE-2017-8824 Public exploit

The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileg…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Dec 5, 2017
Unscored —

CVE-2018-8897 Public exploit EPSS 18%

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) w…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine

May 8, 2018

References

article
https://access.redhat.com/security/updates/classification/#important
article
https://access.redhat.com/security/vulnerabilities/pop_ss
article
https://access.redhat.com/articles/3431591
report
https://access.redhat.com/security/cve/CVE-2017-5754
article
https://access.redhat.com/security/vulnerabilities/speculativeexecution
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443615
report
https://bugzilla.redhat.com/show_bug.cgi?id=1519160
report
https://bugzilla.redhat.com/show_bug.cgi?id=1519591
report
https://bugzilla.redhat.com/show_bug.cgi?id=1519781
report
https://bugzilla.redhat.com/show_bug.cgi?id=1531135
report
https://bugzilla.redhat.com/show_bug.cgi?id=1548412
report
https://bugzilla.redhat.com/show_bug.cgi?id=1567074
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1319.json
report
https://access.redhat.com/security/cve/CVE-2017-5715
report
https://bugzilla.redhat.com/show_bug.cgi?id=1519780
advisory
https://www.cve.org/CVERecord?id=CVE-2017-5715
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-5715
article
https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html
article
https://meltdownattack.com
article
https://spectreattack.com/
advisory
https://www.cve.org/CVERecord?id=CVE-2017-5754
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-5754
report
https://access.redhat.com/security/cve/CVE-2017-7645
advisory
https://www.cve.org/CVERecord?id=CVE-2017-7645
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-7645
report
https://access.redhat.com/security/cve/CVE-2017-8824
advisory
https://www.cve.org/CVERecord?id=CVE-2017-8824
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-8824
report
https://access.redhat.com/security/cve/CVE-2017-13166
advisory
https://www.cve.org/CVERecord?id=CVE-2017-13166
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-13166
report
https://access.redhat.com/security/cve/CVE-2017-18017
advisory
https://www.cve.org/CVERecord?id=CVE-2017-18017
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-18017
report
https://access.redhat.com/security/cve/CVE-2017-1000410
advisory
https://www.cve.org/CVERecord?id=CVE-2017-1000410
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000410
report
https://access.redhat.com/security/cve/CVE-2018-8897
advisory
https://www.cve.org/CVERecord?id=CVE-2018-8897

Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 70

Vulnerabilities 8

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP comm…

An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. An…

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36…

The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a den…

The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileg…

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) w…

References