Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 70

Vulnerabilities 9

• High 7.8
  CVE-2018-10901

  A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the pre…

  [UNKNOWN] kernel: linux-azure-edge Ubuntu
  Jul 26, 2018
• Medium 5.6
  CVE-2018-3620

  Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure…

  Intel Multiple linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Aug 14, 2018
• Medium 5.6
  CVE-2018-3646

  Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure…

  Intel Multiple linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Aug 14, 2018
• Unscored —
  CVE-2017-0861

  Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to…

  Google Android linux-raspi2 linux-hwe Android Debian Ubuntu
  Nov 16, 2017
• Unscored —
  CVE-2017-15265

  Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 16, 2017
• Unscored —
  CVE-2018-1000004

  In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound sy…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 16, 2018
• Unscored —
  CVE-2018-3693

  Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of…

  Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu
  Jul 10, 2018
• Unscored —
  CVE-2018-5390 EPSS 72%

  Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service

  Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 6, 2018
• Unscored —
  CVE-2018-7566

  The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/se…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 30, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/security/vulnerabilities/L1TF
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1501878
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1535315
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1550142
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1563994
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1581650
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1585005
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1601704
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1601849
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2390.json
• report
  https://access.redhat.com/security/cve/CVE-2017-0861
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-0861
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-0861
• report
  https://access.redhat.com/security/cve/CVE-2017-15265
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-15265
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-15265
• report
  https://access.redhat.com/security/cve/CVE-2018-3620
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3620
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-3620
• article
  https://access.redhat.com/articles/3562741
• article
  https://foreshadowattack.eu/
• article
  https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
• article
  https://www.redhat.com/en/blog/deeper-look-l1-terminal-fault-aka-foreshadow
• article
  https://www.redhat.com/en/blog/understanding-l1-terminal-fault-aka-foreshadow-what-you-need-know
• report
  https://access.redhat.com/security/cve/CVE-2018-3646
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3646
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-3646
• report
  https://access.redhat.com/security/cve/CVE-2018-3693
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3693
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-3693
• article
  https://01.org/security/advisories/intel-oss-10002
• article
  https://access.redhat.com/solutions/3523601
• article
  https://people.csail.mit.edu/vlk/spectre11.pdf
• article
  https://software.intel.com/sites/default/files/managed/4e/a1/337879-analyzing-potential-bounds-Check-bypass-vulnerabilities.pdf
• report
  https://access.redhat.com/security/cve/CVE-2018-5390
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5390
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5390
• article
  https://access.redhat.com/articles/3553061