RHSA-2018:0181HighCVSS 7.8

Red Hat Security Advisory: kernel-rt security and bug fix update

Published
January 25, 2018
Last Modified
November 5, 2026

🔗 CVE IDs covered (5)

CVE-2017-7472 →CVE-2017-12192 →CVE-2017-12193 →CVE-2017-15649 →CVE-2015-8539 →

📋 Description

CVE-2015-8539 — kernel: local privesc in key management CVE-2017-7472 — kernel: keyctl_set_reqkey_keyring() leaks thread keyrings CVE-2017-12192 — kernel: NULL pointer dereference due to KEYCTL_READ on negative key CVE-2017-12193 — kernel: Null pointer dereference due to incorrect node-splitting in assoc_array implementation CVE-2017-15649 — kernel: Use-after-free in the af_packet.c

🎯 Affected products17

  • Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-1:3.10.0-693.17.1.rt56.604.el6rt.src as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-1:3.10.0-693.17.1.rt56.604.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-debug-1:3.10.0-693.17.1.rt56.604.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-debug-debuginfo-1:3.10.0-693.17.1.rt56.604.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-debug-devel-1:3.10.0-693.17.1.rt56.604.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-debuginfo-1:3.10.0-693.17.1.rt56.604.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-debuginfo-common-x86_64-1:3.10.0-693.17.1.rt56.604.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-devel-1:3.10.0-693.17.1.rt56.604.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-doc-1:3.10.0-693.17.1.rt56.604.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-firmware-1:3.10.0-693.17.1.rt56.604.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-trace-1:3.10.0-693.17.1.rt56.604.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-trace-debuginfo-1:3.10.0-693.17.1.rt56.604.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-trace-devel-1:3.10.0-693.17.1.rt56.604.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-vanilla-1:3.10.0-693.17.1.rt56.604.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-vanilla-debuginfo-1:3.10.0-693.17.1.rt56.604.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
  • kernel-rt-vanilla-devel-1:3.10.0-693.17.1.rt56.604.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

🔗 References (8)