Synopsis

Important: kernel-rt security and bug fix update

Type/Severity

Security Advisory: Important

Topic

Updated kernel-rt packages that fix two security issues and several bugs
are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.

Description

The kernel-rt packages contain the Linux kernel, the core of any Linux
operating system.

• It was found that the Linux kernel's Infiniband subsystem did not
  properly sanitize input parameters while registering memory regions from
  user space via the (u)verbs API. A local user with access to a
  /dev/infiniband/uverbsX device could use this flaw to crash the system or,
  potentially, escalate their privileges on the system. (CVE-2014-8159,
  Important)
  
• A use-after-free flaw was found in the way the Linux kernel's SCTP
  implementation handled authentication key reference counting during INIT
  collisions. A remote attacker could use this flaw to crash the system or,
  potentially, escalate their privileges on the system. (CVE-2015-1421,
  Important)
  

Red Hat would like to thank Mellanox for reporting the CVE-2014-8159 issue.
The CVE-2015-1421 issue was discovered by Sun Baoliang of Red Hat.

The kernel-rt packages have been upgraded to version 3.10.0-229.1.2, which
provides a number of bug fixes over the previous version, including:

• The kdump service could become unresponsive due to a deadlock in the
  kernel call ioapic_lock.
  
• Attempt to make metadata changes such as creating a thin device or
  snapshot thin device did not error out cleanly.
  

(BZ#1203359)

All kernel-rt users are advised to upgrade to these updated packages, which
correct these issues. The system must be rebooted for this update to take
effect.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for Real Time 7 x86_64

Fixes

• BZ - 1181166 - CVE-2014-8159 kernel: infiniband: uverbs: unprotected physical memory access
• BZ - 1196581 - CVE-2015-1421 kernel: net: slab corruption from use after free on INIT collisions
• BZ - 1203359 - kernel-rt: rebase tree to match RHEL7.1.z source tree

CVEs

• CVE-2014-8159
• CVE-2015-1421

References

• http://www.redhat.com/security/updates/classification/#normal

Red Hat Enterprise Linux for Real Time 7

SRPM
kernel-rt-3.10.0-229.1.2.rt56.141.2.el7_1.src.rpm	SHA-256: ed87a2d5cc99492702302a645115e22e70b9076ed79383ca36e67ed687261cb7
x86_64
kernel-rt-3.10.0-229.1.2.rt56.141.2.el7_1.x86_64.rpm	SHA-256: 95fdc6e7c6f6ad5f3988504e0f8d45f7e62804bacbea007c0ef4fad6714503f8
kernel-rt-debug-3.10.0-229.1.2.rt56.141.2.el7_1.x86_64.rpm	SHA-256: c6aca346099128c0d2ea8150dd52d7522c50af36e93bbfd22aa87c98cfa0cba7
kernel-rt-debug-debuginfo-3.10.0-229.1.2.rt56.141.2.el7_1.x86_64.rpm	SHA-256: 3340aa162d16d4cb5bb758a3423089c1f042d97e21fb128596059f88b2739ffe
kernel-rt-debug-devel-3.10.0-229.1.2.rt56.141.2.el7_1.x86_64.rpm	SHA-256: 25cb951a5b829246a1598e67c12dcd3c59201026e73cd250171cb0da8616bdfc
kernel-rt-debuginfo-3.10.0-229.1.2.rt56.141.2.el7_1.x86_64.rpm	SHA-256: 88722e14b0d894634456fe2e8663a0073c08c75f970f145cd3af88f6c2213d5d
kernel-rt-debuginfo-common-x86_64-3.10.0-229.1.2.rt56.141.2.el7_1.x86_64.rpm	SHA-256: 894529e2394740f086f29aa8d88a6db913a87b84780780992532b9f1ada45c35
kernel-rt-devel-3.10.0-229.1.2.rt56.141.2.el7_1.x86_64.rpm	SHA-256: 4a51d93b33fccfd41ff3017e675496a665109ceb770da24cc71e38c6cf0e34a3
kernel-rt-doc-3.10.0-229.1.2.rt56.141.2.el7_1.noarch.rpm	SHA-256: da8cfa8d528d6181cab96a1ec23a135fbed6ced42b03de1b1abdfb5e7ba107ab
kernel-rt-trace-3.10.0-229.1.2.rt56.141.2.el7_1.x86_64.rpm	SHA-256: 96173a50bbe93dd0ddebdde87e3f4afa94b307eb5ad5758fb3520d30a9be1c52
kernel-rt-trace-debuginfo-3.10.0-229.1.2.rt56.141.2.el7_1.x86_64.rpm	SHA-256: 118c7fc7e5eab828a645e31c6d70ca324ba2d3f83563c481cbab701b98fdcdc5
kernel-rt-trace-devel-3.10.0-229.1.2.rt56.141.2.el7_1.x86_64.rpm	SHA-256: 040085bcff6b603efb6c42140855f40a9e106259bc00ac5180d2756e21128739