Synopsis

Important: kernel-rt security update

Type/Severity

Security Advisory: Important

Topic

An update for kernel-rt is now available for Red Hat Enterprise MRG 2.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

• Kernel: error in exception handling leads to DoS (CVE-2018-8897)
  
• kernel: ptrace() incorrect error handling leads to corruption and DoS (CVE-2018-1000199)
  

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank Nick Peterson (Everdox Tech LLC) and Andy Lutomirski for reporting CVE-2018-8897 and Andy Lutomirski for reporting CVE-2018-1000199.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

• MRG Realtime 2 x86_64

Fixes

• BZ - 1567074 - CVE-2018-8897 Kernel: error in exception handling leads to DoS
• BZ - 1568477 - CVE-2018-1000199 kernel: ptrace() incorrect error handling leads to corruption and DoS

CVEs

• CVE-2018-8897
• CVE-2018-1000199

References

• https://access.redhat.com/security/updates/classification/#important
• https://access.redhat.com/security/vulnerabilities/pop_ss

MRG Realtime 2

SRPM
kernel-rt-3.10.0-693.25.4.rt56.613.el6rt.src.rpm	SHA-256: 7daa1fec60263519d8df290ccff46c52e7f72501a7e1739b28d0a67dae2386bc
x86_64
kernel-rt-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm	SHA-256: 8d03681d52f76277fc3798c0318c41119f84e1df151849c809f2fcfa3fc29cc5
kernel-rt-debug-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm	SHA-256: f630d74de31cf93062b4b9d6a9272f7f5bae0209f15bb97ee18261a63d6ff598
kernel-rt-debug-debuginfo-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm	SHA-256: 4b77a63779d95d9b2e49fe7d4b471f86fe0da4029861c80216848b09a932a428
kernel-rt-debug-devel-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm	SHA-256: e2c00787137c3a14ed382c210d4bac37df4bd0405d1a63faf6424fc088621958
kernel-rt-debuginfo-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm	SHA-256: e63cb12d50d2b30b9d79e3c6aa0dfac7e474cc3737eddd813b469e2c99d8ee9e
kernel-rt-debuginfo-common-x86_64-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm	SHA-256: ca2254697a741cca0c1e650c578c06a9568152c5a4a54736bb48f72d97aeaa8b
kernel-rt-devel-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm	SHA-256: 6a23cac7f461716e6308fac5998a466a2499bc2dd4a354a6dcc785b91021546b
kernel-rt-doc-3.10.0-693.25.4.rt56.613.el6rt.noarch.rpm	SHA-256: 00e6a6f1b2aa97344804ab94d6018e2651cc5fdd2d69328b3aa7b24e3d32fd81
kernel-rt-firmware-3.10.0-693.25.4.rt56.613.el6rt.noarch.rpm	SHA-256: 38d3190e4aaec7d81e0405fd8b22daeb0b62da245f8e83bc0155e392ada25446
kernel-rt-trace-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm	SHA-256: 896a01d0710c9598984bac87762aae070e0536617171c325f8883bbfe9c47cfd
kernel-rt-trace-debuginfo-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm	SHA-256: 0e7ca77b1b20a6f313a92980062ff03a07d07bbbbad64cb7d5b5ed9d2fda896c
kernel-rt-trace-devel-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm	SHA-256: 30fcf48ed40cc40169e5b722dfdac0de321ffa931ceb1a268533a5d41bddf256
kernel-rt-vanilla-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm	SHA-256: 05bdd88db2a357ab18a18ba866e98c66c466543061dfd99b1811e1a7458ce34e
kernel-rt-vanilla-debuginfo-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm	SHA-256: eaea6990394793859b0fb0241596e10180f70acb6e5ecfc8c8a24a28128668d5
kernel-rt-vanilla-devel-3.10.0-693.25.4.rt56.613.el6rt.x86_64.rpm	SHA-256: 273979deec347f540e7511bfe24ca53d0d56d4af80b03f7541824359d596ca33