5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.031 Low
EPSS
Percentile
91.0%
The kernel-alt packages provide the Linux kernel version 4.x.
Security Fix(es):
kernel: out-of-bounds memcpy in fs/ext4/inline.c:ext4_read_inline_data() with crafted ext4 image (CVE-2018-11412)
kernel: use-after-free in jbd2_journal_commit_transaction funtion (CVE-2018-10876)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
blk-mq IO hang in null_blk test (BZ#1581223)
lpfc remove lpfc_enable_pbde module parameter. (BZ#1615875)
RHEL-Alt-7.6 - [Power9][DD2.2][4.14.0-109]package installation segfaults inside debian chroot env in P9 KVM guest with HTM enabled (kvm) (BZ#1628817)
Pegas1.1 - [P9] βthreads=2β or higher is required to boot up VM with above 256 vcpu [rhel-alt-7.6.z] (BZ#1634653)
RHEL-Alt-7.6 Snapshot5 - System crashed under stress-ng & HTX on the mix mode guest (kvm) (BZ#1637890)
RHEL-Alt-7.6 - BostonESS:P9:DD2.01 - Testing Ethtool options βrβ and βpβ for the i40e driver causes the kernel to crash and reboots the server (i40e) (CORAL) (BZ#1644606)
RHEL-Alt-7.6 Host/RHV4.2: system crashed and kdump failed to collect CPUs in KVM guests (BZ#1649196)
RHEL-Alt-7.6 Host:BostonLC:P9:boslcp1: system crashed in __find_linux_pte+0xac (kvm) (BZ#1651065)
[LLNL 7.7 Bug] Rasdaemon doesnβt seem to collect APEI errors (BZ#1664495)
Users of kernel are advised to upgrade to these updated packages, which fix these bugs.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 7 | aarch64 | kernel-headers | <Β 4.14.0-115.6.1.el7a | kernel-headers-4.14.0-115.6.1.el7a.aarch64.rpm |
RedHat | 7 | ppc64le | kernel-debuginfo | <Β 4.14.0-115.6.1.el7a | kernel-debuginfo-4.14.0-115.6.1.el7a.ppc64le.rpm |
RedHat | 7 | ppc64le | python-perf | <Β 4.14.0-115.6.1.el7a | python-perf-4.14.0-115.6.1.el7a.ppc64le.rpm |
RedHat | 7 | s390x | kernel-devel | <Β 4.14.0-115.6.1.el7a | kernel-devel-4.14.0-115.6.1.el7a.s390x.rpm |
RedHat | 7 | ppc64le | kernel-tools | <Β 4.14.0-115.6.1.el7a | kernel-tools-4.14.0-115.6.1.el7a.ppc64le.rpm |
RedHat | 7 | s390x | perf-debuginfo | <Β 4.14.0-115.6.1.el7a | perf-debuginfo-4.14.0-115.6.1.el7a.s390x.rpm |
RedHat | 7 | s390x | kernel-debug | <Β 4.14.0-115.6.1.el7a | kernel-debug-4.14.0-115.6.1.el7a.s390x.rpm |
RedHat | 7 | aarch64 | kernel-tools-libs | <Β 4.14.0-115.6.1.el7a | kernel-tools-libs-4.14.0-115.6.1.el7a.aarch64.rpm |
RedHat | 7 | ppc64le | kernel-bootwrapper | <Β 4.14.0-115.6.1.el7a | kernel-bootwrapper-4.14.0-115.6.1.el7a.ppc64le.rpm |
RedHat | 7 | s390x | kernel-kdump-devel | <Β 4.14.0-115.6.1.el7a | kernel-kdump-devel-4.14.0-115.6.1.el7a.s390x.rpm |
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.031 Low
EPSS
Percentile
91.0%