RHEA-2017:3163 - Product Enhancement Advisory

Topic

New kernel-alt packages are now available for Red Hat Enterprise Linux 7.

Description

The kernel-alt packages provide the Linux kernel version 4.11.0.

This enhancement update adds the kernel-alt packages to Red Hat Enterprise Linux 7 for ARM and for IBM Power LE (POWER9).

For detailed information on changes in this release, see the Release Notes linked from the References section.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for ARM 64 7 aarch64
• Red Hat Enterprise Linux for Power 9 7 ppc64le

Fixes

• BZ - 1399727 - CVE-2016-7910 kernel: Use after free in seq file
• BZ - 1403145 - CVE-2016-9576 kernel: Use after free in SCSI generic device interface
• BZ - 1404200 - CVE-2016-10147 kernel: Kernel crash by spawning mcrypt(alg) with incompatible algorithm
• BZ - 1404939 - CVE-2016-7914 kernel: assoc_array: don't call compare_object() on a node
• BZ - 1406085 - CVE-2016-7916 kernel: proc: prevent accessing /proc/<pid>/environ until it's ready
• BZ - 1412210 - CVE-2016-10088 kernel: Use after free in SCSI generic device interface (CVE-2016-9576 regression)
• BZ - 1416114 - CVE-2017-5549 kernel: Incorrect line-state error handling
• BZ - 1419916 - CVE-2017-2618 kernel: Off-by-one error in selinux_setprocattr (/proc/self/attr/fscreate)
• BZ - 1420276 - CVE-2017-5986 kernel: Reachable BUG_ON from userspace in sctp_wait_for_sndbuf
• BZ - 1428319 - CVE-2017-2636 kernel: Race condition access to n_hdlc.tbuf causes double free in n_hdlc_release()
• BZ - 1436629 - CVE-2017-7277 kernel: Mishandling SCM_TIMESTAMPING_OPT_STATS feature causes out-of-bounds read
• BZ - 1437404 - CVE-2017-7308 kernel: net/packet: overflow in check for priv area size
• BZ - 1441088 - CVE-2017-7616 kernel: Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c
• BZ - 1450972 - CVE-2017-8890 kernel: Double free in the inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c
• BZ - 1452679 - CVE-2017-9074 kernel: net: IPv6 fragmentation implementation of nexthdr field may be associated with an invalid option
• BZ - 1462706 - Backport vfio/type1: Synchronous locked page accounting
• BZ - 1473649 - CVE-2017-7542 kernel: Integer overflow in ip6_find_1stfragopt() causes infinite loop
• BZ - 1479304 - CVE-2017-1000111 kernel: Heap out-of-bounds in AF_PACKET sockets
• BZ - 1480266 - CVE-2017-7558 kernel: Out of bounds read in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() in SCTP stack
• BZ - 1487295 - CVE-2017-14106 kernel: Divide-by-zero in __tcp_select_window
• BZ - 1492984 - CVE-2017-12168 Kernel: kvm: ARM64: assert failure when accessing PMCCNTR register

CVEs

• CVE-2017-12146
• CVE-2017-12168

References

• https://access.redhat.com/articles/3158541
• https://access.redhat.com/articles/3158511