Stay Secure with the Latest Linux Advisories

security advisorykernel updatebug fix

Scientific Linux SL7.x: SLSA-2019-0512-1 Important Kernel Issues

kernel: Memory corruption due to incorrect socket cloning (CVE-2018-9568) * kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks (CVE-2018-17972) * kernel: Faulty computation of numberic bounds in the BPF verifier (CVE-2018-18445) Bug Fix(es) and Enhancement(s): * kernel fuse invalidates cached attributes during reads * [NetApp-FC-NVMe] SL7.6: nvme reset gets hung i [More...]. Synopsis: Important: kernel security, bug fix, and enhancement update Advisory ID: SLSA-2019:0512-1 Issue Date: 2019-03-14 CVE Numbers: CVE-2018-17972 CVE-2018-18445 CVE-2018-9568 -- Security Fix(es): * kernel: Memory corruption due to incorrect socket cloning (CVE-2018-9568) * kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks (CVE-2018-17972) * kernel: Faulty computation of numberic bounds in the BPF verifier (CVE-2018-18445) Bug Fix(es) and Enhancement(s): * kernel fuse invalidates cached attributes during reads * [NetApp-FC-NVMe] SL7.6: nvme reset gets hung indefinitely * Memory reclaim deadlock calling __sock_create() after memalloc_noio_save() * hardened usercopy is causing crash * Backport: xfrm: policy: init locks early * AWS m5 instance type loses NVMe mounted volumes [was: Unable to Mount StatefulSet PV in AWS EBS] * SL 7.6 running on a VirtualBox guest with a GUI has a mouse problem * Kernel bug report in cgroups on heavily contested 3.10 node * [PCIe] SHPC probe crash on Non-ACPI/Non-SHPC ports * [Cavium 7.7 Feat] qla2xxx: Update to latest upstream. * Regression in lpfc and the CNE1000 (BE2 FCoE) adapters that no longer initialize * [csiostor] call trace after command: modprobe csiostor * libceph: fall back to sendmsg for slab pages * Deadlock between stop_one_cpu_nowait() and stop_two_cpus() * Soft lockups occur when the sd driver passes a device size of 1 sector to string_get_size() * [SL7.7] BUG: unable to handle kernel paging request at ffffffffffffffff * SL7.6 - powerpc/pseries: Disable CPUhotplug across migrations / powerpc/rtas: Fix a potential race between CPU-Offline & Migration (LPM) * blk-mq: fix corruption with direct issue * [SL7][patch] iscsi driver can block reboot/shutdown * [DELL EMC 7.6 BUG] Unable to create-namespace over Dell NVDIMM-N * efi_bgrt_init fails to ioremap error during boot * Unable to mount a share on kernel- 3.10.0-957.el7. The share can be mounted on kernel-3.10.0-862.14.4.el7 * System crash with RIP nfs_readpage_async+0x43 -- BUG: unable to handle kernel NULL pointer dereference -- SL7 x86_64 bpftool-3.10.0-957.10.1.el7.x86_64.rpm kernel-3.10.0-957.10.1.el7.x86_64.rpm kernel-debug-3.10.0-957.10.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-957.10.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-957.10.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-957.10.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-957.10.1.el7.x86_64.rpm kernel-devel-3.10.0-957.10.1.el7.x86_64.rpm kernel-headers-3.10.0-957.10.1.el7.x86_64.rpm kernel-tools-3.10.0-957.10.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-957.10.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-957.10.1.el7.x86_64.rpm perf-3.10.0-957.10.1.el7.x86_64.rpm perf-debuginfo-3.10.0-957.10.1.el7.x86_64.rpm python-perf-3.10.0-957.10.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-957.10.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-957.10.1.el7.x86_64.rpm noarch kernel-abi-whitelists-3.10.0-957.10.1.el7.noarch.rpm kernel-doc-3.10.0-957.10.1.el7.noarch.rpm - Scientific Linux Development Team . Kernel stability enhancement and vulnerability resolution patch for Scientific Linux SL7.x tackling memory leak and network socket concerns.. Scientific Linux, Kernel Update, Security Advisory, Bug Fixes, Memory Issues. . Severity: Important. LinuxSecurity.com Team

Mar 15, 2019 •Important Scientific Linux