Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 547
Alerts This Week
Warning Icon 1 547

Red Hat Enterprise Linux 6 RHSA-2018-2846-01 Critical: Kernel Update

red hat
Calendar Grey October 9, 2018
Dist Redhat Esm H88
Critical kernel security and bug resolution patch for Red Hat Enterprise Linux. Make sure to update your system promptly.
An update for kernel is now available for Red Hat Enterprise Linux 6

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* A flaw named FragmentSmack was found in the way the Linux kernel handled reassembly of fragmented IPv4 and IPv6 packets. A remote attacker could use this flaw to trigger time and calculation expensive fragment reassembly algorithm by sending specially crafted packets which could lead to a CPU saturation and hence a denial of service on the system. (CVE-2018-5391)
* kernel: Integer overflow in Linux's create_elf_tables function (CVE-2018-14634)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat would like to thank Juha-Matti Tilli (Aalto University - Department of Communications and Networking and Nokia Bell Labs) for reporting CVE-2018-5391 and Qualys Research Labs for reporting CVE-2018-14634.
Bug Fix(es):
These updated kernel packages include also numerous bug fixes. Space precludes documenting all of the bug fixes in this advisory. See the descriptions in the related Knowledge Article:
https://access.redhat.com/articles/3635371

Topics%20covered

Topics Covered

security advisory denial of service kernel update bug fix Red Hat Enterprise Linux Integer overflow FragmentSmack

References

https://access.redhat.com/security/cve/CVE-2018-5391 https://access.redhat.com/security/cve/CVE-2018-14634 https://access.redhat.com/security/updates/classification#important https://access.redhat.com/articles/3635371

Package List

Red Hat Enterprise Linux Desktop (v. 6):
Source: kernel-2.6.32-754.6.3.el6.src.rpm
i386: kernel-2.6.32-754.6.3.el6.i686.rpm kernel-debug-2.6.32-754.6.3.el6.i686.rpm kernel-debug-debuginfo-2.6.32-754.6.3.el6.i686.rpm kernel-debug-devel-2.6.32-754.6.3.el6.i686.rpm kernel-debuginfo-2.6.32-754.6.3.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-754.6.3.el6.i686.rpm kernel-devel-2.6.32-754.6.3.el6.i686.rpm kernel-headers-2.6.32-754.6.3.el6.i686.rpm perf-2.6.32-754.6.3.el6.i686.rpm perf-debuginfo-2.6.32-754.6.3.el6.i686.rpm python-perf-debuginfo-2.6.32-754.6.3.el6.i686.rpm
noarch: kernel-abi-whitelists-2.6.32-754.6.3.el6.noarch.rpm kernel-doc-2.6.32-754.6.3.el6.noarch.rpm kernel-firmware-2.6.32-754.6.3.el6.noarch.rpm
x86_64: kernel-2.6.32-754.6.3.el6.x86_64.rpm kernel-debug-2.6.32-754.6.3.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-754.6.3.el6.i686.rpm kernel-debug-debuginfo-2.6.32-754.6.3.el6.x86_64.rpm kernel-debug-devel-2.6.32-754.6.3.el6.i686.rpm kernel-debug-devel-2.6.32-754.6.3.el6.x86_64.rpm kernel-debuginfo-2.6.32-754.6.3.el6.i686.rpm kernel-debuginfo-2.6.32-754.6.3.el6.x86_64.rpm kernel-debuginfo-common-i686-2.6.32-754.6.3.el6.i686.rpm kernel-debuginfo-common-x86_64-2.6.32-754.6.3.el6.x86_64.rpm kernel-devel-2.6.32-754.6.3.el6.x86_64.rpm

Read the Full Advisory


Severity
important
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2018:2846-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2018:2846
Issue date: 2018-10-09

Topic

An update for kernel is now available for Red Hat Enterprise Linux 6.Red Hat Product Security has rated this update as having a security impactof Important. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available for each vulnerabilityfrom the CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory denial of service kernel update bug fix Red Hat Enterprise Linux Integer overflow FragmentSmack

Relevant Releases Architectures

Red Hat Enterprise Linux Desktop (v. 6) - i386, noarch, x86_64

Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64

Red Hat Enterprise Linux HPC Node (v. 6) - noarch, x86_64

Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64

Red Hat Enterprise Linux Server (v. 6) - i386, noarch, ppc64, s390x, x86_64

Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64

Red Hat Enterprise Linux Workstation (v. 6) - i386, noarch, x86_64

Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64

Bugs Fixed

1609664 - CVE-2018-5391 kernel: IP fragments with random offsets allow a remote denial of service (FragmentSmack)

1616397 - kernel-2.6.32-754.3.5.el6.x86_64 crash on Dell Inc. PowerEdge 1950

1624498 - CVE-2018-14634 kernel: Integer overflow in Linux's create_elf_tables function

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.