RHSA-2018:1854 — Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 70

Release	Package	Fixed in
Red Hat · RHEL 6 enterprise_linux:6::client	kernel	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-abi-whitelists	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debug	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debug-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debug-devel	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debuginfo-common-i686	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debuginfo-common-x86_64	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-devel	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-doc	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-firmware	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-headers	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::client	perf	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::client	perf-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::client	python-perf	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::client	python-perf-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-abi-whitelists	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debug	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debug-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debug-devel	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debuginfo-common-i686	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debuginfo-common-x86_64	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-devel	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-doc	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-firmware	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-headers	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	perf	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	perf-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	python-perf	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	python-perf-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-abi-whitelists	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-bootwrapper	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debug	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debug-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debug-devel	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-i686	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-ppc64	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-s390x	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-x86_64	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-devel	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-doc	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-firmware	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-headers	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-kdump	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-kdump-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-kdump-devel	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	perf	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	perf-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	python-perf	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::server	python-perf-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-abi-whitelists	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debug	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debug-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debug-devel	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debuginfo-common-i686	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debuginfo-common-x86_64	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-devel	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-doc	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-firmware	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-headers	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	perf	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	perf-debuginfo	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	python-perf	0:2.6.32-754.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	python-perf-debuginfo	0:2.6.32-754.el6

Vulnerabilities 18

Medium 5.5

CVE-2018-1130

Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/d…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 10, 2018
Medium 5.5

CVE-2018-3639 Public exploit EPSS 60%

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addre…

Intel Multiple linux-raspi2 linux-hwe Debian Ubuntu Alpine

May 22, 2018
Unscored —

CVE-2012-6701

Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possib…

May 2, 2016
Unscored —

CVE-2015-8830

Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to caus…

linux linux linux-lts-utopic linux-lts-vivid Debian Ubuntu

May 2, 2016
Unscored —

CVE-2016-8650

The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated …

linux-raspi2 linux-hwe linux linux Debian Ubuntu

Nov 28, 2016
Unscored —

CVE-2017-12190

The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcou…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Nov 22, 2017
Unscored —

CVE-2017-15121

A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a …

Red Hat Red Hat Enterprise Linux linux Linux Debian

Dec 6, 2017
Unscored —

CVE-2017-18203

The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a deni…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 27, 2018
Unscored —

CVE-2017-2671 Public exploit

The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock …

linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu

Apr 5, 2017
Unscored —

CVE-2017-6001

Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a cra…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 18, 2017
Unscored —

CVE-2017-7308 Public exploit EPSS 18%

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate ce…

linux-raspi2 linux-hwe linux linux-gke Debian Ubuntu

Mar 29, 2017
Unscored —

CVE-2017-7616

Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 10, 2017
Unscored —

CVE-2017-7889

The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanis…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 17, 2017
Unscored —

CVE-2017-8890 Public exploit

The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attacker…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 10, 2017
Unscored —

CVE-2017-9075

The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whi…

linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu

May 19, 2017
Unscored —

CVE-2017-9076

The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, wh…

linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu

May 19, 2017
Unscored —

CVE-2017-9077

The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whi…

linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu

May 19, 2017
Unscored —

CVE-2018-5803 Public exploit

In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_c…

Linux Foundation Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

Jun 12, 2018

References

article
https://access.redhat.com/security/updates/classification/#important
article
https://access.redhat.com/security/vulnerabilities/ssbd
article
https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/6/html/6.10_release_notes/index.html
article
https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/6/html/6.10_technical_notes/index.html
report
https://bugzilla.redhat.com/show_bug.cgi?id=869942
report
https://bugzilla.redhat.com/show_bug.cgi?id=1314275
report
https://bugzilla.redhat.com/show_bug.cgi?id=1314288
report
https://bugzilla.redhat.com/show_bug.cgi?id=1395187
report
https://bugzilla.redhat.com/show_bug.cgi?id=1422825
report
https://bugzilla.redhat.com/show_bug.cgi?id=1436649
report
https://bugzilla.redhat.com/show_bug.cgi?id=1437404
report
https://bugzilla.redhat.com/show_bug.cgi?id=1441088
report
https://bugzilla.redhat.com/show_bug.cgi?id=1444493
report
https://bugzilla.redhat.com/show_bug.cgi?id=1448170
report
https://bugzilla.redhat.com/show_bug.cgi?id=1450972
report
https://bugzilla.redhat.com/show_bug.cgi?id=1452688
report
https://bugzilla.redhat.com/show_bug.cgi?id=1452691
report
https://bugzilla.redhat.com/show_bug.cgi?id=1452744
report
https://bugzilla.redhat.com/show_bug.cgi?id=1495089
report
https://bugzilla.redhat.com/show_bug.cgi?id=1497152
report
https://bugzilla.redhat.com/show_bug.cgi?id=1520893
report
https://bugzilla.redhat.com/show_bug.cgi?id=1550811
report
https://bugzilla.redhat.com/show_bug.cgi?id=1551051
report
https://bugzilla.redhat.com/show_bug.cgi?id=1560494
report
https://bugzilla.redhat.com/show_bug.cgi?id=1566890
report
https://bugzilla.redhat.com/show_bug.cgi?id=1576419
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1854.json
report
https://access.redhat.com/security/cve/CVE-2012-6701
advisory
https://www.cve.org/CVERecord?id=CVE-2012-6701
advisory
https://nvd.nist.gov/vuln/detail/CVE-2012-6701
report
https://access.redhat.com/security/cve/CVE-2015-8830
advisory
https://www.cve.org/CVERecord?id=CVE-2015-8830
advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-8830
article
http://seclists.org/oss-sec/2016/q2/479
article
https://bugs.chromium.org/p/project-zero/issues/detail?id=735
report
https://access.redhat.com/security/cve/CVE-2016-8650
advisory
https://www.cve.org/CVERecord?id=CVE-2016-8650
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-8650
report
https://access.redhat.com/security/cve/CVE-2017-2671

Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 70

Vulnerabilities 18

Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/d…

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addre…

Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possib…

Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to caus…

The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated …

The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcou…

A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a …

The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a deni…

The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock …

Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a cra…

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate ce…

Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4…

The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanis…

The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attacker…

The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whi…

The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, wh…

The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whi…

In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_c…

References