Synopsis

Important: kernel security update

Type/Severity

Security Advisory: Important

Topic

An update for kernel is now available for Red Hat Enterprise Linux 5 Extended
Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of
Important. A Common Vulnerability Scoring System (CVSS) base score, which gives
a detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux operating
system.

Security Fix(es):

• A flaw was found in the way memory was being allocated on the stack for user
  space binaries. If heap (or different memory region) and stack memory regions
  were adjacent to each other, an attacker could use this flaw to jump over the
  stack guard gap, cause controlled memory corruption on process stack or the
  adjacent memory region, and thus increase their privileges on the system. This
  is a kernel-side mitigation which increases the stack guard gap size from one
  page to 1 MiB to make successful exploitation of this issue more difficult.
  (CVE-2017-1000364, Important)
  

Red Hat would like to thank Qualys Research Labs for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in
this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

• Red Hat Enterprise Linux Server - Extended Life Cycle Support 5 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 5 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 5 s390x

Fixes

• BZ - 1461333 - CVE-2017-1000364 kernel: heap/stack gap jumping via unbounded stack allocations

CVEs

• CVE-2017-1000364

References

• https://access.redhat.com/security/updates/classification/#important
• https://access.redhat.com/security/vulnerabilities/stackguard

Red Hat Enterprise Linux Server - Extended Life Cycle Support 5

SRPM
x86_64
kernel-doc-2.6.18-420.el5.noarch.rpm	SHA-256: 7316380c5cf1161f96c78a759c993e36c664e11476c0aaeb6044b1b8421e8cdc
i386
kernel-doc-2.6.18-420.el5.noarch.rpm	SHA-256: 7316380c5cf1161f96c78a759c993e36c664e11476c0aaeb6044b1b8421e8cdc

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 5

SRPM
s390x
kernel-2.6.18-420.el5.s390x.rpm	SHA-256: 6e6d7d1758aabfdcdeb7313ab625ee3dabf02b310e20d267bd162f6a6b143ca1
kernel-debug-2.6.18-420.el5.s390x.rpm	SHA-256: 6573806554eee0bc6743a4b36ae03637ab9aafc266d5b0a3df70cbb17f541440
kernel-debug-devel-2.6.18-420.el5.s390x.rpm	SHA-256: 109272d9f2c4c187057e463fafcad820085a5810aeef35fd9625cba02fc2caee
kernel-devel-2.6.18-420.el5.s390x.rpm	SHA-256: f293f27d5bcbf12e07d8fbad983dd4d0d53cb7edc079b9e794fc15d38ab86d4f
kernel-doc-2.6.18-420.el5.noarch.rpm	SHA-256: 7316380c5cf1161f96c78a759c993e36c664e11476c0aaeb6044b1b8421e8cdc
kernel-headers-2.6.18-420.el5.s390x.rpm	SHA-256: f0bab39e63ccf86e4815311199cbb45d35d0d463fa8d770ad27fd90ce368be75
kernel-kdump-2.6.18-420.el5.s390x.rpm	SHA-256: da3506f85d2a60118fd4ce947dc33581a635956a4251a3dbaba083a272707ab2
kernel-kdump-devel-2.6.18-420.el5.s390x.rpm	SHA-256: 1a2cf8ac281ebd945692996bcba43fb1036cee4673fd34749d7ba64d3153cfae