Synopsis

Important: kernel security update

Type/Severity

Security Advisory: Important

Topic

An update for kernel is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support and Red Hat Enterprise Linux 6.6 Telco Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions (a commonly used performance optimization). It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory read from address to which a recent memory write has occurred may see an older value and subsequently cause an update into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to read privileged memory by conducting targeted cache side-channel attacks. (CVE-2018-3639, x86 AMD)
  

Red Hat would like to thank Ken Johnson (Microsoft Security Response Center) and Jann Horn (Google Project Zero) for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

• Red Hat Enterprise Linux Server - AUS 6.6 x86_64
• Red Hat Enterprise Linux Server - TUS 6.6 x86_64

Fixes

• BZ - 1566890 - CVE-2018-3639 hw: cpu: speculative store bypass

CVEs

• CVE-2018-3639

References

• https://access.redhat.com/security/updates/classification/#important
• https://access.redhat.com/security/vulnerabilities/ssbd

Red Hat Enterprise Linux Server - AUS 6.6

SRPM
kernel-2.6.32-504.72.1.el6.src.rpm	SHA-256: cb9d2e6f578ed962bf7efcd4bb7c19a6b99cff78dbc0ad6757a11efaea92f379
x86_64
kernel-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 4836eda3620219a88d96103e9034789f05a2c2761e898bc338299b352d63ff2c
kernel-abi-whitelists-2.6.32-504.72.1.el6.noarch.rpm	SHA-256: e85a07b27f5dea88a1e8c43003c25b9df6157c10a4474ae462b5998d5019ee90
kernel-debug-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 866213567a39f7d92606c85f81b2ec239ffd6686bd1f61db5d420297873af68c
kernel-debug-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 37a88d275275f688837c696466453fa48e256fea43d9ef744bd4b3bb7ac8c755
kernel-debug-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 37a88d275275f688837c696466453fa48e256fea43d9ef744bd4b3bb7ac8c755
kernel-debug-devel-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 7cd87249bdc010f4342e7be5f2d2dc5602b44c97cfe02301ac772ac6c3565963
kernel-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: fb086751d16b24848346106364258e5c1b59ecc562f7ce1fcee98de2c1eb25b1
kernel-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: fb086751d16b24848346106364258e5c1b59ecc562f7ce1fcee98de2c1eb25b1
kernel-debuginfo-common-x86_64-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 6fc4286545af2914ccb31dd7f053092a11a65f2f35b260e7f6cbf69ac700c651
kernel-debuginfo-common-x86_64-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 6fc4286545af2914ccb31dd7f053092a11a65f2f35b260e7f6cbf69ac700c651
kernel-devel-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: a6b6b591e2973807e2dda3bf7d8f9bd6b055d7cb0358ef1503f6d4dc73261bd3
kernel-doc-2.6.32-504.72.1.el6.noarch.rpm	SHA-256: 494a2becc9012c2871aeff170c43134fa0120c4c39bc575fd103544b98123ea9
kernel-firmware-2.6.32-504.72.1.el6.noarch.rpm	SHA-256: 79bf7826214e34f4c6d77f4fc9927ec7f06c331cdc3f6aebf03953a772fc80b2
kernel-headers-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: bc1912002ce342bce5eca5bfecdfe3c50af7e825b92df2f0e0c199cf9360dad1
perf-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 90b62e7793541cd252c3a05b3dee5e5501539747a9cbeb91de638aadc74006f7
perf-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 7f4c12eaeaa8ac10cf72de17af5785e08f7337171450f61e594510a1fb36f019
perf-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 7f4c12eaeaa8ac10cf72de17af5785e08f7337171450f61e594510a1fb36f019
python-perf-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 39e242b32a78808d6ae0bac8f25ca486ea0ea645927330977affe8146bac4020
python-perf-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: f52ec298a8fe141ec8e9a095741541c089189197776b9dccdcae083cb0c0f156
python-perf-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: f52ec298a8fe141ec8e9a095741541c089189197776b9dccdcae083cb0c0f156

Red Hat Enterprise Linux Server - TUS 6.6

SRPM
kernel-2.6.32-504.72.1.el6.src.rpm	SHA-256: cb9d2e6f578ed962bf7efcd4bb7c19a6b99cff78dbc0ad6757a11efaea92f379
x86_64
kernel-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 4836eda3620219a88d96103e9034789f05a2c2761e898bc338299b352d63ff2c
kernel-abi-whitelists-2.6.32-504.72.1.el6.noarch.rpm	SHA-256: e85a07b27f5dea88a1e8c43003c25b9df6157c10a4474ae462b5998d5019ee90
kernel-debug-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 866213567a39f7d92606c85f81b2ec239ffd6686bd1f61db5d420297873af68c
kernel-debug-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 37a88d275275f688837c696466453fa48e256fea43d9ef744bd4b3bb7ac8c755
kernel-debug-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 37a88d275275f688837c696466453fa48e256fea43d9ef744bd4b3bb7ac8c755
kernel-debug-devel-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 7cd87249bdc010f4342e7be5f2d2dc5602b44c97cfe02301ac772ac6c3565963
kernel-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: fb086751d16b24848346106364258e5c1b59ecc562f7ce1fcee98de2c1eb25b1
kernel-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: fb086751d16b24848346106364258e5c1b59ecc562f7ce1fcee98de2c1eb25b1
kernel-debuginfo-common-x86_64-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 6fc4286545af2914ccb31dd7f053092a11a65f2f35b260e7f6cbf69ac700c651
kernel-debuginfo-common-x86_64-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 6fc4286545af2914ccb31dd7f053092a11a65f2f35b260e7f6cbf69ac700c651
kernel-devel-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: a6b6b591e2973807e2dda3bf7d8f9bd6b055d7cb0358ef1503f6d4dc73261bd3
kernel-doc-2.6.32-504.72.1.el6.noarch.rpm	SHA-256: 494a2becc9012c2871aeff170c43134fa0120c4c39bc575fd103544b98123ea9
kernel-firmware-2.6.32-504.72.1.el6.noarch.rpm	SHA-256: 79bf7826214e34f4c6d77f4fc9927ec7f06c331cdc3f6aebf03953a772fc80b2
kernel-headers-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: bc1912002ce342bce5eca5bfecdfe3c50af7e825b92df2f0e0c199cf9360dad1
perf-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 90b62e7793541cd252c3a05b3dee5e5501539747a9cbeb91de638aadc74006f7
perf-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 7f4c12eaeaa8ac10cf72de17af5785e08f7337171450f61e594510a1fb36f019
perf-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 7f4c12eaeaa8ac10cf72de17af5785e08f7337171450f61e594510a1fb36f019
python-perf-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: 39e242b32a78808d6ae0bac8f25ca486ea0ea645927330977affe8146bac4020
python-perf-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: f52ec298a8fe141ec8e9a095741541c089189197776b9dccdcae083cb0c0f156
python-perf-debuginfo-2.6.32-504.72.1.el6.x86_64.rpm	SHA-256: f52ec298a8fe141ec8e9a095741541c089189197776b9dccdcae083cb0c0f156