Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 43

Vulnerabilities 4

• High 7.8
  CVE-2018-14634 Exploited Public exploit EPSS 15%

  An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with …

  The Linux Foundation Kernel linux-raspi2 linux-hwe Debian Ubuntu
  Sep 25, 2018

  KEV Jan 26, 2026
• Unscored —
  CVE-2017-18344 Public exploit

  The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properl…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 26, 2018
• Unscored —
  CVE-2018-10675

  The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 2, 2018
• Unscored —
  CVE-2018-5391 Public exploit EPSS 32%

  The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets

  The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 6, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/articles/3553061
• article
  https://access.redhat.com/security/vulnerabilities/mutagen-astronomy
• article
  https://access.redhat.com/articles/3684891
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1575065
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1609664
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1610958
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1624498
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3540.json
• report
  https://access.redhat.com/security/cve/CVE-2017-18344
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-18344
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-18344
• report
  https://access.redhat.com/security/cve/CVE-2018-5391
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5391
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5391
• advisory
  https://www.kb.cert.org/vuls/id/641765
• report
  https://access.redhat.com/security/cve/CVE-2018-10675
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-10675
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-10675
• report
  https://access.redhat.com/security/cve/CVE-2018-14634
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-14634
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-14634
• article
  https://www.openwall.com/lists/oss-security/2018/09/25/4
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog