Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 17

Vulnerabilities 7

• Medium 5.6
  CVE-2018-3620

  Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure…

  Intel Multiple linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Aug 14, 2018
• Medium 5.6
  CVE-2018-3646

  Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure…

  Intel Multiple linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Aug 14, 2018
• Unscored —
  CVE-2017-13215

  A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. And…

  Google Android linux linux Android Debian Ubuntu
  Jan 12, 2018
• Unscored —
  CVE-2018-10675

  The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 2, 2018
• Unscored —
  CVE-2018-3693

  Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of…

  Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu
  Jul 10, 2018
• Unscored —
  CVE-2018-5390 EPSS 72%

  Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service

  Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 6, 2018
• Unscored —
  CVE-2018-7566

  The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/se…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 30, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/security/vulnerabilities/L1TF
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1535173
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1550142
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1575065
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1581650
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1585005
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1594915
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1601704
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2395.json
• report
  https://access.redhat.com/security/cve/CVE-2017-13215
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-13215
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-13215
• report
  https://access.redhat.com/security/cve/CVE-2018-3620
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3620
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-3620
• article
  https://access.redhat.com/articles/3562741
• article
  https://foreshadowattack.eu/
• article
  https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
• article
  https://www.redhat.com/en/blog/deeper-look-l1-terminal-fault-aka-foreshadow
• article
  https://www.redhat.com/en/blog/understanding-l1-terminal-fault-aka-foreshadow-what-you-need-know
• report
  https://access.redhat.com/security/cve/CVE-2018-3646
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3646
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-3646
• report
  https://access.redhat.com/security/cve/CVE-2018-3693
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3693
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-3693
• article
  https://01.org/security/advisories/intel-oss-10002
• article
  https://access.redhat.com/solutions/3523601
• article
  https://people.csail.mit.edu/vlk/spectre11.pdf
• article
  https://software.intel.com/sites/default/files/managed/4e/a1/337879-analyzing-potential-bounds-Check-bypass-vulnerabilities.pdf
• report
  https://access.redhat.com/security/cve/CVE-2018-5390
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5390
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5390
• article
  https://access.redhat.com/articles/3553061
• advisory
  https://www.kb.cert.org/vuls/id/962459
• article
  https://www.spinics.net/lists/netdev/msg514742.html
• report
  https://access.redhat.com/security/cve/CVE-2018-7566
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-7566