Scientific Linux SL7.x: Kernel Important DoS Security SLSA-2017:0386-1 CVE-2016-9083

Date: Thu, 2 Mar 2017 21:27:34 -0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Important: kernel on SL7.x x86_64
MIME-Version: 1.0
Message-ID: <20170302212734.25641.62662@slpackages.fnal.gov>

Synopsis: Important: kernel security, bug fix, and enhancement update
Advisory ID: SLSA-2017:0386-1
Issue Date: 2017-03-02
CVE Numbers: CVE-2016-9083
 CVE-2016-9084
 CVE-2016-8630
 CVE-2016-8655
--

Security Fix(es):

* Linux kernel built with the Kernel-based Virtual Machine (CONFIG_KVM)
support is vulnerable to a null pointer dereference flaw. It could occur
on x86 platform, when emulating an undefined instruction. An attacker
could use this flaw to crash the host kernel resulting in DoS.
(CVE-2016-8630, Important)

* A race condition issue leading to a use-after-free flaw was found in the
way the raw packet sockets implementation in the Linux kernel networking
subsystem handled synchronization while creating the TPACKET_V3 ring
buffer. A local user able to open a raw packet socket (requires the
CAP_NET_RAW capability) could use this flaw to elevate their privileges on
the system. (CVE-2016-8655, Important)

* A flaw was discovered in the Linux kernel's implementation of VFIO. An
attacker issuing an ioctl can create a situation where memory is corrupted
and modify memory outside of the expected area. This may overwrite kernel
memory and subvert kernel execution. (CVE-2016-9083, Important)

* The use of a kzalloc with an integer multiplication allowed an integer
overflow condition to be reached in vfio_pci_intrs.c. This combined with
CVE-2016-9083 may allow an attacker to craft an attack and use unallocated
memory, potentially crashing the machine. (CVE-2016-9084, Moderate)
--

SL7
 x86_64
 kernel-3.10.0-514.10.2.el7.x86_64.rpm
 kernel-debug-3.10.0-514.10.2.el7.x86_64.rpm
 kernel-debug-debuginfo-3.10.0-514.10.2.el7.x86_64.rpm
 kernel-debug-devel-3.10.0-514.10.2.el7.x86_64.rpm
 kernel-debuginfo-3.10.0-514.10.2.el7.x86_64.rpm
 kernel-debuginfo-common-x86_64-3.10.0-514.10.2.el7.x86_64.rpm
 kernel-devel-3.10.0-514.10.2.el7.x86_64.rpm
 kernel-headers-3.10.0-514.10.2.el7.x86_64.rpm
 kernel-tools-3.10.0-514.10.2.el7.x86_64.rpm
 kernel-tools-debuginfo-3.10.0-514.10.2.el7.x86_64.rpm
 kernel-tools-libs-3.10.0-514.10.2.el7.x86_64.rpm
 perf-3.10.0-514.10.2.el7.x86_64.rpm
 perf-debuginfo-3.10.0-514.10.2.el7.x86_64.rpm
 python-perf-3.10.0-514.10.2.el7.x86_64.rpm
 python-perf-debuginfo-3.10.0-514.10.2.el7.x86_64.rpm
 kernel-tools-libs-devel-3.10.0-514.10.2.el7.x86_64.rpm
 noarch
 kernel-abi-whitelists-3.10.0-514.10.2.el7.noarch.rpm
 kernel-doc-3.10.0-514.10.2.el7.noarch.rpm

- Scientific Linux Development Team