Synopsis

Important: kernel security update

Type/Severity

Security Advisory: Important

Topic

An update for kernel is now available for Red Hat Enterprise Linux 6.4 Advanced Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions (a commonly used performance optimization). It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory read from address to which a recent memory write has occurred may see an older value and subsequently cause an update into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to read privileged memory by conducting targeted cache side-channel attacks. (CVE-2018-3639)
  

Note: This issue is present in hardware and cannot be fully fixed via software update. The updated kernel packages provide software side of the mitigation for this hardware issue. To be fully functional, up-to-date CPU microcode applied on the system is required. Please refer to References section for further information about this issue, CPU microcode requirements and the potential performance impact.

Red Hat would like to thank Ken Johnson (Microsoft Security Response Center) and Jann Horn (Google Project Zero) for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

• Red Hat Enterprise Linux Server - AUS 6.4 x86_64

Fixes

• BZ - 1566890 - CVE-2018-3639 hw: cpu: speculative store bypass

CVEs

• CVE-2018-3639

References

• https://access.redhat.com/security/updates/classification/#important
• https://access.redhat.com/security/vulnerabilities/ssbd

Red Hat Enterprise Linux Server - AUS 6.4

SRPM
kernel-2.6.32-358.88.4.el6.src.rpm	SHA-256: 44c299d26642d1985fe2e988580339116cf7fef79ed4585759b61ed95ef75d92
x86_64
kernel-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: a08411e64f55a9d7324b055c414a06d029744fba456a046885837a844f7a78a5
kernel-debug-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: 2f95d1a54856074c6181985ccbc38f148478e05c7d35281ed16c62380ffc9515
kernel-debug-debuginfo-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: 569a424bc25383c514c25ff77cefe7e11caf115c995c1b7efb616a5b1e638d12
kernel-debug-debuginfo-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: 569a424bc25383c514c25ff77cefe7e11caf115c995c1b7efb616a5b1e638d12
kernel-debug-devel-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: b5d5b6db69fa9871f1b659afd76eb6662576555862afab53fa9a13dcf8005873
kernel-debuginfo-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: a990b578a7218ebe61daa98590a0c5d6e6f452281bd6dd767409f890813e0a90
kernel-debuginfo-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: a990b578a7218ebe61daa98590a0c5d6e6f452281bd6dd767409f890813e0a90
kernel-debuginfo-common-x86_64-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: da543b5148c883494504e0d4239483a28887c7b4b7e0d5e1c6376e780f62f82e
kernel-debuginfo-common-x86_64-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: da543b5148c883494504e0d4239483a28887c7b4b7e0d5e1c6376e780f62f82e
kernel-devel-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: 6b6a065b6caa1f5aaf83fb30bca042e3981bea7f7b473d5342f8b9c572853547
kernel-doc-2.6.32-358.88.4.el6.noarch.rpm	SHA-256: 5037f3b80ca703288de6e29a30cb858e484b748448d1ae4491cf28f10ed9f11b
kernel-firmware-2.6.32-358.88.4.el6.noarch.rpm	SHA-256: ba1ca2f371989c6234246f5b03338cd6c521e27366d43ce21da31c5e6800e079
kernel-headers-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: 89e327fb4f8a6ae299ac9d9100448bcca3c7796e7ea54c09cf7c2bdb4b9efbb2
perf-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: 5854bceb356dd94a9f254bfa7eb316e87f6e1c2a3811f6e2b43a56b871e8a7b5
perf-debuginfo-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: c94ddd03ca42004d644fb5c444a4f8d458463c0cf071b17c38641428e40e7ac7
perf-debuginfo-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: c94ddd03ca42004d644fb5c444a4f8d458463c0cf071b17c38641428e40e7ac7
python-perf-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: 18885ba0aae129a866bcd9dd5b5891964aa7a2aa3e81bf0762339fe0fb9d263c
python-perf-debuginfo-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: bf6920f7983ea582bed2dcb7cc8ab40db9bbdfe682627a6768eea961d8904743
python-perf-debuginfo-2.6.32-358.88.4.el6.x86_64.rpm	SHA-256: bf6920f7983ea582bed2dcb7cc8ab40db9bbdfe682627a6768eea961d8904743