Synopsis

Important: kernel-rt security update

Type/Severity

Security Advisory: Important

Topic

An update for kernel-rt is now available for Red Hat Enterprise MRG 2.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

• hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write (CVE-2019-0155)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

• MRG Realtime 2 x86_64

Fixes

• BZ - 1724398 - CVE-2019-0155 hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write

CVEs

• CVE-2019-0155

References

• https://access.redhat.com/security/updates/classification/#important
• https://access.redhat.com/solutions/i915-graphics

MRG Realtime 2

SRPM
kernel-rt-3.10.0-693.60.3.rt56.655.el6rt.src.rpm	SHA-256: 9618b2f7d4a4bd3f09e7ce6094e590d6e0fa537b43c70bd6e73c981abb72edb0
x86_64
kernel-rt-3.10.0-693.60.3.rt56.655.el6rt.x86_64.rpm	SHA-256: b9e910e1a89e461a339e2ab59b890a5300f219526e0b0fe557fb4d9d3b3ec97b
kernel-rt-debug-3.10.0-693.60.3.rt56.655.el6rt.x86_64.rpm	SHA-256: eb10d6f9eef97fdfa85f175c5e85c17eae6800913bdde6fa6ea5c0aebaf7c90e
kernel-rt-debug-debuginfo-3.10.0-693.60.3.rt56.655.el6rt.x86_64.rpm	SHA-256: 477d8e82548a5180060f093274498ac83e1259748c611f45acde964d9b12a990
kernel-rt-debug-devel-3.10.0-693.60.3.rt56.655.el6rt.x86_64.rpm	SHA-256: 554a8eeffe9baad26d615c981edb9a1a1fa1d19d0595ccf363bc7be1c78acfa2
kernel-rt-debuginfo-3.10.0-693.60.3.rt56.655.el6rt.x86_64.rpm	SHA-256: 2a1a87f342173923d6af6d573cd9a3c4d66d3bea65cf653348f955f9712e0f0c
kernel-rt-debuginfo-common-x86_64-3.10.0-693.60.3.rt56.655.el6rt.x86_64.rpm	SHA-256: cfd5afb81019a20d5495c567865877e7e82a0cc1bcf125857e712196427aad0a
kernel-rt-devel-3.10.0-693.60.3.rt56.655.el6rt.x86_64.rpm	SHA-256: 9f883afe63be6258e856cc814cc629100069b98653d004c38523f333a5eb9041
kernel-rt-doc-3.10.0-693.60.3.rt56.655.el6rt.noarch.rpm	SHA-256: b0ee34fca33de7c0d5f28ff4d65bf69a2cbf45536e1ad3152820683657b10934
kernel-rt-firmware-3.10.0-693.60.3.rt56.655.el6rt.noarch.rpm	SHA-256: cf68cd77e3e25c108651544a5f4046425057f9783772471366912e64491c77c7
kernel-rt-trace-3.10.0-693.60.3.rt56.655.el6rt.x86_64.rpm	SHA-256: 0edceee222080b8e62fbfbf2d8a614711ae093c115e1cdd7ecde5249ac4f4210
kernel-rt-trace-debuginfo-3.10.0-693.60.3.rt56.655.el6rt.x86_64.rpm	SHA-256: 733b8ddff208a5f1aeb827ea727f665eb2e9636921658200699bc92398348563
kernel-rt-trace-devel-3.10.0-693.60.3.rt56.655.el6rt.x86_64.rpm	SHA-256: 2b86016cb05f26bb51638ba0bc292ef1e1a9159270688506d839b5fbe8f1f9ec
kernel-rt-vanilla-3.10.0-693.60.3.rt56.655.el6rt.x86_64.rpm	SHA-256: 006708e825cbccc8b98db25323aa0217f7cb05b1229ad39e0403035da3bd696a
kernel-rt-vanilla-debuginfo-3.10.0-693.60.3.rt56.655.el6rt.x86_64.rpm	SHA-256: 6fea6fa9088252f99d8fa4567f5f4cc4e2a5b136d218d53838a7bd49fb88994b
kernel-rt-vanilla-devel-3.10.0-693.60.3.rt56.655.el6rt.x86_64.rpm	SHA-256: 150e70ec35df6c7e197d561f4491080b1bc421ba179abf306abe5827ac0edf35