概要

Important: kernel security update

タイプ/重大度

Security Advisory: Important

トピック

An update for kernel is now available for Red Hat Enterprise Linux 5.9 Long
Life.

Red Hat Product Security has rated this update as having a security impact of
Important. A Common Vulnerability Scoring System (CVSS) base score, which gives
a detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.

説明

The kernel packages contain the Linux kernel, the core of any Linux operating
system.

Security Fix(es):

• A flaw was found in the way memory was being allocated on the stack for user
  space binaries. If heap (or different memory region) and stack memory regions
  were adjacent to each other, an attacker could use this flaw to jump over the
  stack guard gap, cause controlled memory corruption on process stack or the
  adjacent memory region, and thus increase their privileges on the system. This
  is a kernel-side mitigation which increases the stack guard gap size from one
  page to 1 MiB to make successful exploitation of this issue more difficult.
  (CVE-2017-1000364, Important)
  

Red Hat would like to thank Qualys Research Labs for reporting this issue.

解決法

For details on how to apply this update, which includes the changes described in
this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

影響を受ける製品

• Red Hat Enterprise Linux Server - AUS 5.9 x86_64
• Red Hat Enterprise Linux Server - AUS 5.9 ia64
• Red Hat Enterprise Linux Server - AUS 5.9 i386

修正

• BZ - 1461333 - CVE-2017-1000364 kernel: heap/stack gap jumping via unbounded stack allocations

CVE

• CVE-2017-1000364

参考資料

• https://access.redhat.com/security/updates/classification/#important
• https://access.redhat.com/security/vulnerabilities/stackguard

Red Hat Enterprise Linux Server - AUS 5.9

SRPM
x86_64
kernel-doc-2.6.18-348.33.2.el5.noarch.rpm	SHA-256: c227b2ff5fca65c132da1a2387e1eaa97cf70058abab862edd67e9917f8dcbae
ia64
kernel-doc-2.6.18-348.33.2.el5.noarch.rpm	SHA-256: c227b2ff5fca65c132da1a2387e1eaa97cf70058abab862edd67e9917f8dcbae
i386
kernel-2.6.18-348.33.2.el5.i686.rpm	SHA-256: 5c55df0f75b3e164047b42c5231eb4b2c0ed8568a6ec20646679fc06e2b0102c
kernel-PAE-2.6.18-348.33.2.el5.i686.rpm	SHA-256: 442ba450360d4247962db88d528073b423af77b1e1d29db156aa265c76de86da
kernel-PAE-devel-2.6.18-348.33.2.el5.i686.rpm	SHA-256: 7f7498f17d27ab15c668173af89fe3ef1e4828b4094f60ffc703c935054d19ce
kernel-debug-2.6.18-348.33.2.el5.i686.rpm	SHA-256: f53418b55a5d1869c6866313f3e24085b4a6f476f34b592cb0d2b11138c5b89f
kernel-debug-devel-2.6.18-348.33.2.el5.i686.rpm	SHA-256: 794d6ce570c5377748d261a89defbc4da73699f81de7286c60049401a22cfac3
kernel-devel-2.6.18-348.33.2.el5.i686.rpm	SHA-256: 227dcbc1be0cbe2c47bf0f9a43aee5cf856bd2b2a621897d9739ee01c2e151da
kernel-doc-2.6.18-348.33.2.el5.noarch.rpm	SHA-256: c227b2ff5fca65c132da1a2387e1eaa97cf70058abab862edd67e9917f8dcbae
kernel-headers-2.6.18-348.33.2.el5.i386.rpm	SHA-256: 26423e592d4f7f502040c80483717bfb82aef456d3d01b9d43b7c935de652bf1
kernel-xen-2.6.18-348.33.2.el5.i686.rpm	SHA-256: c122cd3e362698fbc85b81e05bc1a975698c69a012131bc6a12985deca1b151c
kernel-xen-devel-2.6.18-348.33.2.el5.i686.rpm	SHA-256: bf81aa630e6304d0006b7289888e48df6a5ea9f426c899b43ed548094202f70a