Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 79

Vulnerabilities 31

• High 7.8
  CVE-2018-10902

  It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 21, 2018
• Medium 5.5
  CVE-2018-1130

  Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/d…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 10, 2018
• Medium 4.8
  CVE-2018-10878

  A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write and a denial of s…

  [UNKNOWN] kernel: linux-raspi2 linux-hwe Debian Ubuntu
  Jul 26, 2018
• Medium 4.8
  CVE-2018-10883

  A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_d…

  [UNKNOWN] kernel: linux-raspi2 linux-hwe Debian Ubuntu
  Jul 30, 2018
• Medium 4.2
  CVE-2018-10879

  A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry…

  [UNKNOWN] kernel: linux-raspi2 linux-hwe Debian Ubuntu
  Jul 26, 2018
• Medium 4.2
  CVE-2018-10881

  A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group…

  [UNKNOWN] kernel: linux-raspi2 linux-hwe Debian Ubuntu
  Jul 26, 2018
• Low 2.8
  CVE-2018-1120 Public exploit

  A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memor…

  [UNKNOWN] kernel: linux-raspi2 linux-hwe Debian Ubuntu
  Jun 20, 2018
• Low 2.3
  CVE-2018-1118

  Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and …

  kernel vhost linux-raspi2 linux-hwe Debian Ubuntu
  May 10, 2018
• Unscored —
  CVE-2015-8830

  Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to caus…

  linux linux linux-lts-utopic linux-lts-vivid Debian Ubuntu
  May 2, 2016
• Unscored —
  CVE-2016-4913

  The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate n…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 23, 2016
• Unscored —
  CVE-2017-0861

  Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to…

  Google Android linux-raspi2 linux-hwe Android Debian Ubuntu
  Nov 16, 2017
• Unscored —
  CVE-2017-10661 Public exploit EPSS 13%

  Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a deni…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Aug 19, 2017
• Unscored —
  CVE-2017-17805

  The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowi…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 20, 2017
• Unscored —
  CVE-2017-18208

  The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 1, 2018
• Unscored —
  CVE-2017-18232

  The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, whic…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 15, 2018
• Unscored —
  CVE-2017-18344 Public exploit

  The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properl…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 26, 2018
• Unscored —
  CVE-2017-18360

  In change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local users could cause a deni…

  linux-raspi2 linux-hwe linux-riscv linux-gcp Debian Ubuntu
  Jan 31, 2019
• Unscored —
  CVE-2018-1000026

  Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnera…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Feb 9, 2018
• Unscored —
  CVE-2018-10322

  The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users t…

  linux-azure linux-riscv linux-gcp linux Debian Ubuntu
  Apr 24, 2018
• Unscored —
  CVE-2018-1092

  The ext4_iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case of a root directory w…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Apr 2, 2018
• Unscored —
  CVE-2018-1094

  The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not always initialize the crc3…

  linux-raspi2 linux-hwe linux-azure linux-gcp Linux Debian Ubuntu
  Apr 2, 2018
• Unscored —
  CVE-2018-10940

  The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attacker…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 9, 2018
• Unscored —
  CVE-2018-13405 Public exploit

  The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 6, 2018
• Unscored —
  CVE-2018-18690

  In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesyste…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 26, 2018
• Unscored —
  CVE-2018-5344

  In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers t…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 12, 2018
• Unscored —
  CVE-2018-5391 Public exploit EPSS 32%

  The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets

  The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 6, 2018
• Unscored —
  CVE-2018-5803 Public exploit

  In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_c…

  Linux Foundation Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 12, 2018
• Unscored —
  CVE-2018-5848

  In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a resul…

  Qualcomm Android for MSM, Firefox OS for MSM, QRD Android linux-raspi2 linux-hwe Android Browsers Debian Ubuntu
  Jun 12, 2018
• Unscored —
  CVE-2018-7740

  The resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local users to cause a denial o…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 7, 2018
• Unscored —
  CVE-2018-7757

  Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Mar 8, 2018
• Unscored —
  CVE-2018-8781

  The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 h…

  Check Point Software Technologies Linux Kernel linux-raspi2 linux-hwe Linux Network devices Debian Ubuntu
  Apr 23, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/articles/3553061
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1314275
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1322930
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1337528
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1481136
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1488484
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1504058
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1507027
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1528312
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1533909
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1541846
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1542494
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1551051
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1551565
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552867
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1553361
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1557434
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1557599
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1558066
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1558328
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1560777
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1560788
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1561162
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1563697
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1563994
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1564186
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568167
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1571062
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1571623
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1572983
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1573699
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1575472
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1576419
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1577408
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1584775
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1590720
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1590799