Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 15

Vulnerabilities 6

• High 7.8
  CVE-2018-10902

  It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 21, 2018
• High 7.1
  CVE-2017-7482

  In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the s…

  [UNKNOWN] kernel: linux-raspi2 linux-hwe Debian Ubuntu
  Jul 30, 2018
• Unscored —
  CVE-2018-12929

  ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-af…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jun 28, 2018
• Unscored —
  CVE-2018-12930

  ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a st…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jun 28, 2018
• Unscored —
  CVE-2018-12931

  ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based ou…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jun 28, 2018
• Unscored —
  CVE-2018-5803 Public exploit

  In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_c…

  Linux Foundation Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 12, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1446288
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1551051
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1590720
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1597831
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1597837
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1597843
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1674935
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0641.json
• report
  https://access.redhat.com/security/cve/CVE-2017-7482
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-7482
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-7482
• report
  https://access.redhat.com/security/cve/CVE-2018-5803
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5803
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5803
• report
  https://access.redhat.com/security/cve/CVE-2018-10902
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-10902
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-10902
• report
  https://access.redhat.com/security/cve/CVE-2018-12929
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-12929
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-12929
• report
  https://access.redhat.com/security/cve/CVE-2018-12930
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-12930
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-12930
• report
  https://access.redhat.com/security/cve/CVE-2018-12931
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-12931
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-12931