Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Red Hat: RHSA-2019-2473 Important: Kernel Security and Bug Fix Update

red hat
Calendar Grey August 13, 2019
Dist Redhat Esm H88
A significant kernel security patch has been released for Red Hat Enterprise Linux 6 to resolve several urgent vulnerabilities affecting users.
An update for kernel is now available for Red Hat Enterprise Linux 6

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* Kernel: page cache side channel attacks (CVE-2019-5489)
* kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial-of-service (CVE-2017-17805)
* kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks (CVE-2018-17972)
* kernel: hw: Spectre SWAPGS gadget vulnerability (CVE-2019-1125)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* OOPS with Null Pointer exception in v4l2_ctrl_query_menu when second arg of function is NULL (BZ#1647975)
* Another RHEL 6 hang in congestion_wait() (BZ#1658254)
* kernel crash after running user space script (BZ#1663262)
* RHEL-6.10: Don't report the use of retpoline on Skylake as vulnerable (BZ#1666102)
* Bad pagetable: 000f “*pdpt = 0000000000000000 *pde = 0000000000000000” RHEL 6 32bit (BZ#1702782)
* fs/binfmt_misc.c: do not allow offset overflow [6.10.z] (BZ#1710149)
* Wrong spectre backport causing linux headers to break compilation of 3rd party packages (BZ#1722185)

Topics%20covered

Topics Covered

security advisory Red Hat kernel update bug fix important security impact denial-of-service

References

https://access.redhat.com/security/cve/CVE-2017-17805 https://access.redhat.com/security/cve/CVE-2018-17972 https://access.redhat.com/security/cve/CVE-2019-1125 https://access.redhat.com/security/cve/CVE-2019-5489 https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/articles/4329821

Package List

Red Hat Enterprise Linux Desktop (v. 6):
Source: kernel-2.6.32-754.18.2.el6.src.rpm
i386: kernel-2.6.32-754.18.2.el6.i686.rpm kernel-debug-2.6.32-754.18.2.el6.i686.rpm kernel-debug-debuginfo-2.6.32-754.18.2.el6.i686.rpm kernel-debug-devel-2.6.32-754.18.2.el6.i686.rpm kernel-debuginfo-2.6.32-754.18.2.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-754.18.2.el6.i686.rpm kernel-devel-2.6.32-754.18.2.el6.i686.rpm kernel-headers-2.6.32-754.18.2.el6.i686.rpm perf-2.6.32-754.18.2.el6.i686.rpm perf-debuginfo-2.6.32-754.18.2.el6.i686.rpm python-perf-debuginfo-2.6.32-754.18.2.el6.i686.rpm
noarch: kernel-abi-whitelists-2.6.32-754.18.2.el6.noarch.rpm kernel-doc-2.6.32-754.18.2.el6.noarch.rpm kernel-firmware-2.6.32-754.18.2.el6.noarch.rpm
x86_64: kernel-2.6.32-754.18.2.el6.x86_64.rpm kernel-debug-2.6.32-754.18.2.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-754.18.2.el6.i686.rpm kernel-debug-debuginfo-2.6.32-754.18.2.el6.x86_64.rpm kernel-debug-devel-2.6.32-754.18.2.el6.i686.rpm kernel-debug-devel-2.6.32-754.18.2.el6.x86_64.rpm kernel-debuginfo-2.6.32-754.18.2.el6.i686.rpm kernel-debuginfo-2.6.32-754.18.2.el6.x86_64.rpm kernel-debuginfo-common-i686-2.6.32-754.18.2.el6.i686.rpm kernel-debuginfo-common-x86_64-2.6.32-754.18.2.el6.x86_64.rpm

Read the Full Advisory


Severity
important
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2019:2473-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2019:2473
Issue date: 2019-08-13

Topic

An update for kernel is now available for Red Hat Enterprise Linux 6.Red Hat Product Security has rated this update as having a security impactof Important. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available for each vulnerabilityfrom the CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat kernel update bug fix important security impact denial-of-service

Relevant Releases Architectures

Red Hat Enterprise Linux Desktop (v. 6) - i386, noarch, x86_64

Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64

Red Hat Enterprise Linux HPC Node (v. 6) - noarch, x86_64

Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64

Red Hat Enterprise Linux Server (v. 6) - i386, noarch, ppc64, s390x, x86_64

Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64

Red Hat Enterprise Linux Workstation (v. 6) - i386, noarch, x86_64

Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64

Bugs Fixed

1528312 - CVE-2017-17805 kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial-of-service

1636349 - CVE-2018-17972 kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks

1664110 - CVE-2019-5489 Kernel: page cache side channel attacks

1724389 - CVE-2019-1125 kernel: hw: Spectre SWAPGS gadget vulnerability

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here