What is RHSA-2018:0152?

RHSA-2018:0152 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: kernel-rt security and bug fix update

Which CVE IDs does RHSA-2018:0152 cover?

RHSA-2018:0152 covers the following CVE IDs: CVE-2015-8539, CVE-2017-7472, CVE-2017-12192, CVE-2017-12193, CVE-2017-15649. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2018:0152?

RHSA-2018:0152 has a CVSS v3 base score of 7.8, published by Red Hat Product Security.

Which products are affected by RHSA-2018:0152?

RHSA-2018:0152 affects 32 products, including: Red Hat Enterprise Linux Realtime (v. 7); Red Hat Enterprise Linux for Real Time for NFV (v. 7); kernel-rt-0:3.10.0-693.17.1.rt56.636.el7.src as a component of Red Hat Enterprise Linux Realtime (v. 7); kernel-rt-0:3.10.0-693.17.1.rt56.636.el7.src as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7); kernel-rt-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7); and others — see the full list on the advisory page.

RHSA-2018:0152HighCVSS 7.8

Red Hat Security Advisory: kernel-rt security and bug fix update

Vendor

Red Hat Product Security

Published

January 25, 2018

Last Modified

November 5, 2026

🔗 CVE IDs covered (5)

CVE-2015-8539 →CVE-2017-7472 →CVE-2017-12192 →CVE-2017-12193 →CVE-2017-15649 →

📋 Description

CVE-2015-8539 — kernel: local privesc in key management CVE-2017-7472 — kernel: keyctl_set_reqkey_keyring() leaks thread keyrings CVE-2017-12192 — kernel: NULL pointer dereference due to KEYCTL_READ on negative key CVE-2017-12193 — kernel: Null pointer dereference due to incorrect node-splitting in assoc_array implementation CVE-2017-15649 — kernel: Use-after-free in the af_packet.c

🎯 Affected products32

Red Hat Enterprise Linux Realtime (v. 7)
Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-0:3.10.0-693.17.1.rt56.636.el7.src as a component of Red Hat Enterprise Linux Realtime (v. 7)
kernel-rt-0:3.10.0-693.17.1.rt56.636.el7.src as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)
kernel-rt-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-debug-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)
kernel-rt-debug-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-debug-debuginfo-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)
kernel-rt-debug-debuginfo-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-debug-devel-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)
kernel-rt-debug-devel-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-debug-kvm-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-debug-kvm-debuginfo-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-debuginfo-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)
kernel-rt-debuginfo-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-debuginfo-common-x86_64-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)
kernel-rt-debuginfo-common-x86_64-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-devel-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)
kernel-rt-devel-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-doc-0:3.10.0-693.17.1.rt56.636.el7.noarch as a component of Red Hat Enterprise Linux Realtime (v. 7)
kernel-rt-doc-0:3.10.0-693.17.1.rt56.636.el7.noarch as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-kvm-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-kvm-debuginfo-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-trace-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)
kernel-rt-trace-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-trace-debuginfo-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)
kernel-rt-trace-debuginfo-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
kernel-rt-trace-devel-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)
kernel-rt-trace-devel-0:3.10.0-693.17.1.rt56.636.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
+2 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

🔗 CVE IDs covered (5)

📋 Description

🎯 Affected products32

✅ Remediation

🔗 References (7)