Synopsis

Important: kernel security update

Type/Severity

Security Advisory: Important

Topic

An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support and Red Hat Enterprise Linux 6.5 Telco Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was built as Position Independent Executable (PIE), the loader could allow part of that application's data segment to map over the memory area reserved for its stack, potentially resulting in memory corruption. An unprivileged local user with access to SUID (or otherwise privileged) PIE binary could use this flaw to escalate their privileges on the system. (CVE-2017-1000253, Important)
  

Red Hat would like to thank Qualys Research Labs for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

• Red Hat Enterprise Linux Server - AUS 6.5 x86_64
• Red Hat Enterprise Linux Server - TUS 6.5 x86_64

Fixes

• BZ - 1492212 - CVE-2017-1000253 kernel: load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary

CVEs

• CVE-2017-1000253

References

• https://access.redhat.com/security/updates/classification/#important
• https://access.redhat.com/security/vulnerabilities/3189592

Red Hat Enterprise Linux Server - AUS 6.5

SRPM
kernel-2.6.32-431.85.1.el6.src.rpm	SHA-256: b6ce38814091a917097f82b1f9cd27a926e8c8d2de4847ebe45ca498c03dcece
x86_64
kernel-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 959c4e0a6d46e516bac4330789ed796d08ca00189d62c503abf0bdf9d0f0aec0
kernel-abi-whitelists-2.6.32-431.85.1.el6.noarch.rpm	SHA-256: 28983983c44b5d582211cd74f42eb0bbf16033ada3afcc4536518056cf78e52f
kernel-debug-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 49a14437fb258341c0ecb3f4f0f2f065cbece46341338f97161abd553e07c146
kernel-debug-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: a12189ad85198d91bf9c8e0df73a7c45e3b29337a0a89354d419fdede3762f68
kernel-debug-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: a12189ad85198d91bf9c8e0df73a7c45e3b29337a0a89354d419fdede3762f68
kernel-debug-devel-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 68fa0eebe7a2b34a1f1bc8d57ea4fa15a48b322b574f9cb6b3aae68dd5151701
kernel-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 70d547beac113e54b6dac82fa09a9bd075abb707b231339bd5b63d06fff5c2ff
kernel-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 70d547beac113e54b6dac82fa09a9bd075abb707b231339bd5b63d06fff5c2ff
kernel-debuginfo-common-x86_64-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 66e9984ac897db5a958e0a476e329f8fdd6687b635c339a004f888bc6b6ffc84
kernel-debuginfo-common-x86_64-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 66e9984ac897db5a958e0a476e329f8fdd6687b635c339a004f888bc6b6ffc84
kernel-devel-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 8701c89b2a37f4b1d6b6e1e75af5ed5dc0232b272fb9c467d12635f5317ebd86
kernel-doc-2.6.32-431.85.1.el6.noarch.rpm	SHA-256: a401e4bea80078b847b37f00eef0186f7335232620a55c548db2004317eebb69
kernel-firmware-2.6.32-431.85.1.el6.noarch.rpm	SHA-256: b1e8b83a975fd93394d50e401fffa8bc1da420777c843a12b63de1bf85a9d1c5
kernel-headers-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 10ff00a9a58ecbe9e95345cdda0976e13d9a015dafe8bbc538691ec8970c6fda
perf-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: f2548de8d6138d8f8e70c99a2a8485a15e8d6bf879c17c171a697d2d4fcf18d0
perf-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 84a47eba812a5a178201c508c3783237c93a0697e69c6a5ee747ef8550b7187e
perf-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 84a47eba812a5a178201c508c3783237c93a0697e69c6a5ee747ef8550b7187e
python-perf-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 10aa6f74d84dee2a6d1fdf21faa76e33e158c8f84d9731bfb75b02e549f320bb
python-perf-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 35a9e2571fbe4645eee656cd5b5a189cf8f90b9b7278089c2e44fb01a33ebcd8
python-perf-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 35a9e2571fbe4645eee656cd5b5a189cf8f90b9b7278089c2e44fb01a33ebcd8

Red Hat Enterprise Linux Server - TUS 6.5

SRPM
kernel-2.6.32-431.85.1.el6.src.rpm	SHA-256: b6ce38814091a917097f82b1f9cd27a926e8c8d2de4847ebe45ca498c03dcece
x86_64
kernel-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 959c4e0a6d46e516bac4330789ed796d08ca00189d62c503abf0bdf9d0f0aec0
kernel-abi-whitelists-2.6.32-431.85.1.el6.noarch.rpm	SHA-256: 28983983c44b5d582211cd74f42eb0bbf16033ada3afcc4536518056cf78e52f
kernel-debug-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 49a14437fb258341c0ecb3f4f0f2f065cbece46341338f97161abd553e07c146
kernel-debug-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: a12189ad85198d91bf9c8e0df73a7c45e3b29337a0a89354d419fdede3762f68
kernel-debug-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: a12189ad85198d91bf9c8e0df73a7c45e3b29337a0a89354d419fdede3762f68
kernel-debug-devel-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 68fa0eebe7a2b34a1f1bc8d57ea4fa15a48b322b574f9cb6b3aae68dd5151701
kernel-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 70d547beac113e54b6dac82fa09a9bd075abb707b231339bd5b63d06fff5c2ff
kernel-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 70d547beac113e54b6dac82fa09a9bd075abb707b231339bd5b63d06fff5c2ff
kernel-debuginfo-common-x86_64-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 66e9984ac897db5a958e0a476e329f8fdd6687b635c339a004f888bc6b6ffc84
kernel-debuginfo-common-x86_64-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 66e9984ac897db5a958e0a476e329f8fdd6687b635c339a004f888bc6b6ffc84
kernel-devel-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 8701c89b2a37f4b1d6b6e1e75af5ed5dc0232b272fb9c467d12635f5317ebd86
kernel-doc-2.6.32-431.85.1.el6.noarch.rpm	SHA-256: a401e4bea80078b847b37f00eef0186f7335232620a55c548db2004317eebb69
kernel-firmware-2.6.32-431.85.1.el6.noarch.rpm	SHA-256: b1e8b83a975fd93394d50e401fffa8bc1da420777c843a12b63de1bf85a9d1c5
kernel-headers-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 10ff00a9a58ecbe9e95345cdda0976e13d9a015dafe8bbc538691ec8970c6fda
perf-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: f2548de8d6138d8f8e70c99a2a8485a15e8d6bf879c17c171a697d2d4fcf18d0
perf-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 84a47eba812a5a178201c508c3783237c93a0697e69c6a5ee747ef8550b7187e
perf-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 84a47eba812a5a178201c508c3783237c93a0697e69c6a5ee747ef8550b7187e
python-perf-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 10aa6f74d84dee2a6d1fdf21faa76e33e158c8f84d9731bfb75b02e549f320bb
python-perf-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 35a9e2571fbe4645eee656cd5b5a189cf8f90b9b7278089c2e44fb01a33ebcd8
python-perf-debuginfo-2.6.32-431.85.1.el6.x86_64.rpm	SHA-256: 35a9e2571fbe4645eee656cd5b5a189cf8f90b9b7278089c2e44fb01a33ebcd8