Synopsis

Important: kernel-rt security update

Type/Severity

Security Advisory: Important

Topic

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

• kernel: broken permission and object lifetime handling for PTRACE_TRACEME (CVE-2019-13272)
  
• kernel: hw: Spectre SWAPGS gadget vulnerability (CVE-2019-1125)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

• Red Hat Enterprise Linux for Real Time 8 x86_64
• Red Hat Enterprise Linux for Real Time for NFV 8 x86_64

Fixes

• BZ - 1724389 - CVE-2019-1125 kernel: hw: Spectre SWAPGS gadget vulnerability
• BZ - 1730895 - CVE-2019-13272 kernel: broken permission and object lifetime handling for PTRACE_TRACEME

CVEs

• CVE-2019-1125
• CVE-2019-13272

References

• https://access.redhat.com/security/updates/classification/#important
• https://access.redhat.com/articles/4329821

Red Hat Enterprise Linux for Real Time 8

SRPM
kernel-rt-4.18.0-80.7.2.rt9.154.el8_0.src.rpm	SHA-256: 257416c122303af03315b91dda522cbd184c478c4098b7809cb6625874cb6edc
x86_64
kernel-rt-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 322a7c22af4f52b9cc8890cbf8077e79afc34ecfd52a45490dc747a73d174681
kernel-rt-core-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: e340475f8594c4a3775926719f3d1f4b2cef6bd34181c94cff8727200300472b
kernel-rt-debug-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: f42e940144fd2f89d812976b511c5e80e96eb3ccacaddcaf4d5ecbaf41ff473c
kernel-rt-debug-core-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: bedbc027b4491b9f5fc6670ec40e0085cadb7fd86a797e528f72ff01a16b14bb
kernel-rt-debug-debuginfo-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 3ce04025ef1833a8cbc17d302e7e39d873e90744e726db38b7d9cd08881761e1
kernel-rt-debug-devel-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: dbc1b194d08648d7abbdb09d6f9e984d9c4ec1769b56ce08052f3e5b24087a72
kernel-rt-debug-kvm-debuginfo-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 758ea72b493d8725bfbecfdf13d779f9be0e0e2e9b5ba61740af40fc6b671fb5
kernel-rt-debug-modules-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 1a8a89f8ae8e289b1100695c913735d2c674e98da9905244b3bb30c3d5b692aa
kernel-rt-debug-modules-extra-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 1b9c1aeb74560ac4798b0758ed8eb7b5baa04e89ebc26370c620620ba7a18df6
kernel-rt-debuginfo-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 5dc9594b3acef8967567599e09a57967cc7aab9ad4ec0fc538f950eca636d1ae
kernel-rt-debuginfo-common-x86_64-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: e36ab2cd545b7e33e07bc775af39d7b6e92bb8e6a9b47b6c8ff23fb6d4890d0a
kernel-rt-devel-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 95d24f98e745d29abd733e7923da427e04601e2758015615ba2d595a8e7c3d13
kernel-rt-kvm-debuginfo-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 745ce8641536b9cf18dea7fa593ef98be0339d0efaae101f89e95dba4e6726ce
kernel-rt-modules-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 83fadc7fa3b235664dcde4d30ac9c40bc14139a9db011fd368c081783335bd44
kernel-rt-modules-extra-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 6da4cb23ab30099ef2abd50093ccfe190a2020c3aa5bd6c398b179f364a41907

Red Hat Enterprise Linux for Real Time for NFV 8

SRPM
kernel-rt-4.18.0-80.7.2.rt9.154.el8_0.src.rpm	SHA-256: 257416c122303af03315b91dda522cbd184c478c4098b7809cb6625874cb6edc
x86_64
kernel-rt-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 322a7c22af4f52b9cc8890cbf8077e79afc34ecfd52a45490dc747a73d174681
kernel-rt-core-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: e340475f8594c4a3775926719f3d1f4b2cef6bd34181c94cff8727200300472b
kernel-rt-debug-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: f42e940144fd2f89d812976b511c5e80e96eb3ccacaddcaf4d5ecbaf41ff473c
kernel-rt-debug-core-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: bedbc027b4491b9f5fc6670ec40e0085cadb7fd86a797e528f72ff01a16b14bb
kernel-rt-debug-debuginfo-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 3ce04025ef1833a8cbc17d302e7e39d873e90744e726db38b7d9cd08881761e1
kernel-rt-debug-devel-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: dbc1b194d08648d7abbdb09d6f9e984d9c4ec1769b56ce08052f3e5b24087a72
kernel-rt-debug-kvm-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: a951d9f6487c806701b067e02b95c3c2bfc748922f7a5d3cf74b61c14fc4fee9
kernel-rt-debug-kvm-debuginfo-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 758ea72b493d8725bfbecfdf13d779f9be0e0e2e9b5ba61740af40fc6b671fb5
kernel-rt-debug-modules-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 1a8a89f8ae8e289b1100695c913735d2c674e98da9905244b3bb30c3d5b692aa
kernel-rt-debug-modules-extra-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 1b9c1aeb74560ac4798b0758ed8eb7b5baa04e89ebc26370c620620ba7a18df6
kernel-rt-debuginfo-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 5dc9594b3acef8967567599e09a57967cc7aab9ad4ec0fc538f950eca636d1ae
kernel-rt-debuginfo-common-x86_64-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: e36ab2cd545b7e33e07bc775af39d7b6e92bb8e6a9b47b6c8ff23fb6d4890d0a
kernel-rt-devel-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 95d24f98e745d29abd733e7923da427e04601e2758015615ba2d595a8e7c3d13
kernel-rt-kvm-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: b747ec6901e979d8e747f326e862a807eda2dbc078c3466a5232e5136193b3f3
kernel-rt-kvm-debuginfo-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 745ce8641536b9cf18dea7fa593ef98be0339d0efaae101f89e95dba4e6726ce
kernel-rt-modules-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 83fadc7fa3b235664dcde4d30ac9c40bc14139a9db011fd368c081783335bd44
kernel-rt-modules-extra-4.18.0-80.7.2.rt9.154.el8_0.x86_64.rpm	SHA-256: 6da4cb23ab30099ef2abd50093ccfe190a2020c3aa5bd6c398b179f364a41907