(RHSA-2017:2429) Important: kernel security and bug fix update

2017-08-0809:46:00

access.redhat.com

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.905 High

EPSS

Percentile

98.8%

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lacked certain checks for the end of a buffer. A remote attacker could trigger a pointer-arithmetic error or possibly cause other unspecified impacts using crafted requests related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c. (CVE-2017-7895, Important)

Red Hat would like to thank Ari Kauppi for reporting this issue.

Bug Fix(es):

If a VFC port became unmapped in the VIOS, it sometimes did not respond with a CRQ init complete following the H_REG_CRQ() call. As a consequence, scsi_block_requests were called until the init complete occurred. If not, I/O requests were hung. The provided patch ensures the host action stays set to IBMVFC_HOST_ACTION_TGT_DEL so that all rports are moved into devloss state unless an init complete is received. (BZ#1460210)

OSVersionArchitecturePackageVersionFilename
RedHat6ppc64kernel-debug-debuginfo< 2.6.32-573.45.1.el6kernel-debug-debuginfo-2.6.32-573.45.1.el6.ppc64.rpm
RedHat6noarchkernel-firmware< 2.6.32-573.45.1.el6kernel-firmware-2.6.32-573.45.1.el6.noarch.rpm
RedHat6s390xkernel-debuginfo-common-s390x< 2.6.32-573.45.1.el6kernel-debuginfo-common-s390x-2.6.32-573.45.1.el6.s390x.rpm
RedHat6ppc64kernel-headers< 2.6.32-573.45.1.el6kernel-headers-2.6.32-573.45.1.el6.ppc64.rpm
RedHat6ppc64perf< 2.6.32-573.45.1.el6perf-2.6.32-573.45.1.el6.ppc64.rpm
RedHat6x86_64perf-debuginfo< 2.6.32-573.45.1.el6perf-debuginfo-2.6.32-573.45.1.el6.x86_64.rpm
RedHat6i686kernel-debuginfo< 2.6.32-573.45.1.el6kernel-debuginfo-2.6.32-573.45.1.el6.i686.rpm
RedHat6ppc64python-perf-debuginfo< 2.6.32-573.45.1.el6python-perf-debuginfo-2.6.32-573.45.1.el6.ppc64.rpm
RedHat6s390xkernel-debug< 2.6.32-573.45.1.el6kernel-debug-2.6.32-573.45.1.el6.s390x.rpm
RedHat6ppc64kernel< 2.6.32-573.45.1.el6kernel-2.6.32-573.45.1.el6.ppc64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	6	ppc64	kernel-debug-debuginfo	< 2.6.32-573.45.1.el6	kernel-debug-debuginfo-2.6.32-573.45.1.el6.ppc64.rpm
RedHat	6	noarch	kernel-firmware	< 2.6.32-573.45.1.el6	kernel-firmware-2.6.32-573.45.1.el6.noarch.rpm
RedHat	6	s390x	kernel-debuginfo-common-s390x	< 2.6.32-573.45.1.el6	kernel-debuginfo-common-s390x-2.6.32-573.45.1.el6.s390x.rpm
RedHat	6	ppc64	kernel-headers	< 2.6.32-573.45.1.el6	kernel-headers-2.6.32-573.45.1.el6.ppc64.rpm
RedHat	6	ppc64	perf	< 2.6.32-573.45.1.el6	perf-2.6.32-573.45.1.el6.ppc64.rpm
RedHat	6	x86_64	perf-debuginfo	< 2.6.32-573.45.1.el6	perf-debuginfo-2.6.32-573.45.1.el6.x86_64.rpm
RedHat	6	i686	kernel-debuginfo	< 2.6.32-573.45.1.el6	kernel-debuginfo-2.6.32-573.45.1.el6.i686.rpm
RedHat	6	ppc64	python-perf-debuginfo	< 2.6.32-573.45.1.el6	python-perf-debuginfo-2.6.32-573.45.1.el6.ppc64.rpm
RedHat	6	s390x	kernel-debug	< 2.6.32-573.45.1.el6	kernel-debug-2.6.32-573.45.1.el6.s390x.rpm
RedHat	6	ppc64	kernel	< 2.6.32-573.45.1.el6	kernel-2.6.32-573.45.1.el6.ppc64.rpm