Synopsis

Important: kernel-alt security and bug fix update

Type/Severity

Security Advisory: Important

Topic

An update for kernel-alt is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel-alt packages provide the Linux kernel version 4.x.

Security Fix(es):

• kernel: lack of check for mmap minimum address in expand_downwards in mm/mmap.c leads to NULL pointer dereferences exploit on non-SMAP platforms (CVE-2019-9213)
  
• kernel: use-after-free in ucma_leave_multicast in drivers/infiniband/core/ucma.c (CVE-2018-14734)
  
• kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks (CVE-2018-17972)
  
• kernel: TLB flush happens too late on mremap (CVE-2018-18281)
  
• kernel: Type confusion in drivers/tty/n_tty.c allows for a denial of service (CVE-2018-18386)
  
• kernel: userfaultfd bypasses tmpfs file permissions (CVE-2018-18397)
  
• kernel: Integer overflow in the alarm_timer_nsleep function (CVE-2018-13053)
  
• kernel: NULL pointer dereference in xfs_da_shrink_inode function (CVE-2018-13094)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

• Failed to boot with ftrace=function in kvm with 2vcpu (BZ#1501024)
  
• [ALT-7.5][x86_64] perf test 63 - inet_pton fails on x86_64 (BZ#1518836)
  
• BUG: potential out-of-bounds string access when forcing a SELinux label on a file (BZ#1595706)
  
• stack out-of-bounds in smb{2,3}_create_lease_buf() on SMB2/SMB3 mounts (BZ#1598757)
  
• [ALT-7.6][KVM][PANIC] ltp/lite proc01 - Unable to handle kernel paging request at virtual address ffff7fe000200018 (BZ#1623193)
  
• Kernel lock up due to read/write lock (BZ#1636261)
  
• [RHEL-ALT] Fix potential Spectre v1 in tty code (BZ#1639679)
  
• [Huawei AArch64 7.6 Bug] HNS3: Vlan on HNS3 NIC cannot communicate (BZ#1639713)
  
• [RHEL7.6-ALT][AWS] backport "nvme: update timeout module parameter type" (BZ#1654958)
  
• ignore STABLE_FLAG of rmap_item->address in rmap_walk_ksm (BZ#1663565)
  
• RHEL-Alt-7.6 - kernel: zcrypt: fix specification exception on z196 at ap probe (BZ#1670018)
  
• [Huawei AArch64 7.6 Bug] Flock over NFSv3 failed (BZ#1670650)
  
• [Huawei AArch64 7.6/7.6-z Bug] HNS3: if a single transmit packet(skb) has more than 8 frags, will cause the NIC to be unavailable (BZ#1677643)
  
• krb5{,i,p} doesn't work with older enctypes on aarch64 (BZ#1678922)
  

Users of kernel are advised to upgrade to these updated packages, which fix these bugs.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

• Red Hat Enterprise Linux for ARM 64 7 aarch64
• Red Hat Enterprise Linux for Power 9 7 ppc64le
• Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x

Fixes

• BZ - 1597747 - CVE-2018-13053 kernel: Integer overflow in the alarm_timer_nsleep function
• BZ - 1597771 - CVE-2018-13094 kernel: NULL pointer dereference in xfs_da_shrink_inode function
• BZ - 1611005 - CVE-2018-14734 kernel: use-after-free in ucma_leave_multicast in drivers/infiniband/core/ucma.c
• BZ - 1636349 - CVE-2018-17972 kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks
• BZ - 1640598 - CVE-2018-18386 kernel: Type confusion in drivers/tty/n_tty.c allows for a denial of service
• BZ - 1641548 - CVE-2018-18397 kernel: userfaultfd bypasses tmpfs file permissions
• BZ - 1645121 - CVE-2018-18281 kernel: TLB flush happens too late on mremap
• BZ - 1686136 - CVE-2019-9213 kernel: lack of check for mmap minimum address in expand_downwards in mm/mmap.c leads to NULL pointer dereferences exploit on non-SMAP platforms

CVEs

• CVE-2018-13053
• CVE-2018-13094
• CVE-2018-14734
• CVE-2018-17972
• CVE-2018-18281
• CVE-2018-18386
• CVE-2018-18397
• CVE-2019-9213

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux for ARM 64 7

SRPM
kernel-alt-4.14.0-115.7.1.el7a.src.rpm	SHA-256: 9ee05707c5c7f3d4b7119e6f62f930e2de88f0f575102a0ba29ce733a894fc17
aarch64
kernel-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: a8111d98c6d63cf3109b2fdcde1fa99ebd8d7f31618f8789cc42741de07e0adc
kernel-abi-whitelists-4.14.0-115.7.1.el7a.noarch.rpm	SHA-256: 9ebecc38ed3f7581de9671eda271bc978f246e82d366f41cdef9fb1aadf1736a
kernel-debug-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: 0290dab8625f8eb92338c4b6e7ea826635e0efd7f3012d3be240ecf241b7fad9
kernel-debug-debuginfo-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: 1eb10f4a633b62e59cd469a11e9a39c7714817ff0c1c5403106dc8db2af77fc1
kernel-debug-debuginfo-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: 1eb10f4a633b62e59cd469a11e9a39c7714817ff0c1c5403106dc8db2af77fc1
kernel-debug-devel-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: a84ab2c4c0da16d92dd281706394b57cf652c4d4b1196d229858740de4331a49
kernel-debuginfo-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: e7a10c40144bf1ecf6adebfa5906911a169a630422ec774ae9d722ec6e793abc
kernel-debuginfo-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: e7a10c40144bf1ecf6adebfa5906911a169a630422ec774ae9d722ec6e793abc
kernel-debuginfo-common-aarch64-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: 5090b203415bbb5c63a2177aa769140b70cf0ac67599ad73278ef04caa935879
kernel-debuginfo-common-aarch64-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: 5090b203415bbb5c63a2177aa769140b70cf0ac67599ad73278ef04caa935879
kernel-devel-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: 5ba6065ba522ac07071d0137b3c99e399f4d5bf29b96590518b76cf7518ccb2c
kernel-doc-4.14.0-115.7.1.el7a.noarch.rpm	SHA-256: 79085877f0fae314d7aacf23bc17cb0dc2adf65453eefa9521ae8fc837060362
kernel-doc-4.14.0-115.7.1.el7a.noarch.rpm	SHA-256: 79085877f0fae314d7aacf23bc17cb0dc2adf65453eefa9521ae8fc837060362
kernel-headers-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: 05791163a9f84cbd59bd92d37cb580d329675a10a6856bb83392d708171cd916
kernel-tools-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: e3595c8ddfe579c83d5c55e42132b2f2db88bff026c871f2c6297676d89a5f4d
kernel-tools-debuginfo-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: ec8ba3681ef01546cdc43e1d347c34c2efb66fc0cc3aa2299b1f5e8eae61c1c6
kernel-tools-debuginfo-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: ec8ba3681ef01546cdc43e1d347c34c2efb66fc0cc3aa2299b1f5e8eae61c1c6
kernel-tools-libs-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: 24fccb5538ffb3032747f046c5def7088d6545db50aec3e1d65afcd229f8759a
kernel-tools-libs-devel-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: d928829dbeae7e12735c91c96d98107e026d40c81a51c158a9729764e5948d86
perf-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: 8b8c3aa1ba0e82c221e428334bbe4fe270c4e8aaa85fb19eda52c8596926b903
perf-debuginfo-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: 0a02ef2f422c7345e3a5a01cbe411503bdbf666f14e90607b51ccafc8c10932b
perf-debuginfo-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: 0a02ef2f422c7345e3a5a01cbe411503bdbf666f14e90607b51ccafc8c10932b
python-perf-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: b37dfa31fc8d9efc9fedecd686038053f4110be3cd17393ace834efae6b582e2
python-perf-debuginfo-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: b8203a947b672b03c274b362f7c8223524a6cea0589c55eecd6f06a04623b3b6
python-perf-debuginfo-4.14.0-115.7.1.el7a.aarch64.rpm	SHA-256: b8203a947b672b03c274b362f7c8223524a6cea0589c55eecd6f06a04623b3b6

Red Hat Enterprise Linux for Power 9 7

SRPM
kernel-alt-4.14.0-115.7.1.el7a.src.rpm	SHA-256: 9ee05707c5c7f3d4b7119e6f62f930e2de88f0f575102a0ba29ce733a894fc17
ppc64le
kernel-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: b06f80c16766a5fa41370880579c24f8b5f5cbb6929df59cef7a9031ee624981
kernel-abi-whitelists-4.14.0-115.7.1.el7a.noarch.rpm	SHA-256: 9ebecc38ed3f7581de9671eda271bc978f246e82d366f41cdef9fb1aadf1736a
kernel-bootwrapper-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: ff921f894e0143449ff139aff58c2ed55b70e15eeafa271cf91f8e08610a9236
kernel-debug-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: 832acbde7cd37a30f357da23ed5ad8f577c88cfa4b1c4fba33610331f606e270
kernel-debug-debuginfo-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: 6425125e48916e763b3b84126a594eafe28a9158770d6acc10dce8510ef095e9
kernel-debug-debuginfo-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: 6425125e48916e763b3b84126a594eafe28a9158770d6acc10dce8510ef095e9
kernel-debug-devel-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: ac4c0c11fec473e91ab3e668db811f26a65da482acf4d7d05a279df171b0110e
kernel-debuginfo-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: 15a6053c42cb39d4f28e63cdeabac43d2896fb3ba9d4bf766804e6a77b99b575
kernel-debuginfo-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: 15a6053c42cb39d4f28e63cdeabac43d2896fb3ba9d4bf766804e6a77b99b575
kernel-debuginfo-common-ppc64le-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: 7b80356bdb2708590d5bc2f91fc19f6db8a621b638879690bfd3881f5f82bb45
kernel-debuginfo-common-ppc64le-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: 7b80356bdb2708590d5bc2f91fc19f6db8a621b638879690bfd3881f5f82bb45
kernel-devel-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: eb52754dcfc024b1fabc408eeaf392ba3b0611848b0661dcf48403f7c07f8645
kernel-doc-4.14.0-115.7.1.el7a.noarch.rpm	SHA-256: 79085877f0fae314d7aacf23bc17cb0dc2adf65453eefa9521ae8fc837060362
kernel-headers-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: dc11d74acd151b3cdb1b88027f09ba6c8c730f446d107202639ae31f2eba7f54
kernel-tools-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: 1978cacebcc5fab2c1b27f77966e261521cfd8fbce926b6e00c5b844f461fe7d
kernel-tools-debuginfo-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: ce4e8e5deaa8aebee69c068109200f6dbd87ff38c4fa937ac948a5eed48648c9
kernel-tools-debuginfo-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: ce4e8e5deaa8aebee69c068109200f6dbd87ff38c4fa937ac948a5eed48648c9
kernel-tools-libs-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: 2e6706f38a0ead5cd35e87e5a229807e7c8c23e957111a6811aec315338c758a
kernel-tools-libs-devel-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: ae8f1819bf7d112d300cc52730a94b3b223dba3598dc3a9c965b78ebe2b85276
perf-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: 51948c3e33fae5e6e0b0ba4467141c0518932c1572e0f6bc22b06ef33d8d6b4b
perf-debuginfo-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: df78990132388eac5d47024c4102737443554a0d51de49a2008d5949dbed55c9
perf-debuginfo-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: df78990132388eac5d47024c4102737443554a0d51de49a2008d5949dbed55c9
python-perf-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: 09062115caf3d7e01a7bd0e0be1f8e5273ab5715b81d710d302d75f1ef9e64e1
python-perf-debuginfo-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: 48aff0b861bb654620ae6b612a3966cc92d8a2cda9c56c69b1a61768d9ee67dd
python-perf-debuginfo-4.14.0-115.7.1.el7a.ppc64le.rpm	SHA-256: 48aff0b861bb654620ae6b612a3966cc92d8a2cda9c56c69b1a61768d9ee67dd

Red Hat Enterprise Linux for IBM System z (Structure A) 7

SRPM
kernel-alt-4.14.0-115.7.1.el7a.src.rpm	SHA-256: 9ee05707c5c7f3d4b7119e6f62f930e2de88f0f575102a0ba29ce733a894fc17
s390x
kernel-4.14.0-115.7.1.el7a.s390x.rpm	SHA-256: 8ab89b8b8abc8d385553d018fdd27bc828209c56b4d607f990c100846b063e33
kernel-abi-whitelists-4.14.0-115.7.1.el7a.noarch.rpm	SHA-256: 9ebecc38ed3f7581de9671eda271bc978f246e82d366f41cdef9fb1aadf1736a
kernel-debug-4.14.0-115.7.1.el7a.s390x.rpm	SHA-256: 22787130d1794400317e43a8def3d6d88653daa69ce60597f22c3427275e7c4e
kernel-debug-debuginfo-4.14.0-115.7.1.el7a.s390x.rpm	SHA-256: 11ab81d95bc1cbcf424324157eba8cc28231114642629bdb9a2e8f8072e1e21a
kernel-debug-devel-4.14.0-115.7.1.el7a.s390x.rpm	SHA-256: 73ce3bdd6d69250839a3dc92f5237aa3e78f732c16e2627b48289c9ed23f6f0c
kernel-debuginfo-4.14.0-115.7.1.el7a.s390x.rpm	SHA-256: 82e0d6e074783b2ec5479199c8e71e72a1a8080ebc68b85b18f2187fcd6324b3
kernel-debuginfo-common-s390x-4.14.0-115.7.1.el7a.s390x.rpm	SHA-256: 656c4c9404d1b7af1e63befc7736157b7c0656b29e23c0e30dbf873fac5566ce
kernel-devel-4.14.0-115.7.1.el7a.s390x.rpm	SHA-256: b4a781d3a83d0026d6cdf23db1cf7a57d10374fa30e63a1dca2afd4cd6e55cda
kernel-doc-4.14.0-115.7.1.el7a.noarch.rpm	SHA-256: 79085877f0fae314d7aacf23bc17cb0dc2adf65453eefa9521ae8fc837060362
kernel-headers-4.14.0-115.7.1.el7a.s390x.rpm	SHA-256: 3d5edd7401a31c4da7abfb7f15dcd569f3b588e2e31e366d84f40e643fddc684
kernel-kdump-4.14.0-115.7.1.el7a.s390x.rpm	SHA-256: df6b6700f9f0def751e95111fcafaa1d13e1e4a40296f566b07793d9a315deb0
kernel-kdump-debuginfo-4.14.0-115.7.1.el7a.s390x.rpm	SHA-256: e937b19c60177b433b5f4a6b74a94fc941baa4b5fec8b12d69d5812a63ff5a76
kernel-kdump-devel-4.14.0-115.7.1.el7a.s390x.rpm	SHA-256: b5cd64f9fd4365ce80e221900230c090cb6854f428a308bacb67505b5c29f8b0
perf-4.14.0-115.7.1.el7a.s390x.rpm	SHA-256: f2b16bb2898e60f3f14e09dfaac034a98209d4e7853406786fa9ed7dd6b89af8
perf-debuginfo-4.14.0-115.7.1.el7a.s390x.rpm	SHA-256: acc899729ce53d0239758578150a9f7308dc62f5a30015f756fa67b9bb8ec68e
python-perf-4.14.0-115.7.1.el7a.s390x.rpm	SHA-256: 6abb0f91edec815377d8137dfcf6a2b89ea17a335991fd324fcb1dff0fd3874e
python-perf-debuginfo-4.14.0-115.7.1.el7a.s390x.rpm	SHA-256: 8c780891ca7738754db79df12fdd7c479f824780b8f7655b71e61ac2f066bea6