This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6, as there is no user namespace support in the products listed.
This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and MRG-2. Future Linux kernel updates for the respective releases might address this issue.
Red Hat Enterprise MRG 2:
This vulnerability has been rated as having a security impact of Moderate. After evaluation and in accordance with the criteria noted in the product support life cycle, there are no plans to address this issue in an upcoming release. Please contact Red Hat Support for further information.
CVSS v2 metrics
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Red Hat Security Errata
|Red Hat Enterprise Linux for Real Time for NFV (v. 7) (kernel-rt)||RHSA-2016:2584||2016-11-03|
|Red Hat Enterprise Linux 7 (kernel)||RHSA-2016:2574||2016-11-03|
Affected Packages State
|Red Hat Enterprise MRG 2||realtime-kernel||Will not fix|
|Red Hat Enterprise Linux 6||kernel||Not affected|
|Red Hat Enterprise Linux 5||kernel||Not affected|
AcknowledgementsThis issue was discovered by Eric W. Biederman (Red Hat).
CVE description copyright © 2017, The MITRE Corporation