This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 as the code with the flaw is not present in the products listed.
This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 6, 7, its real-time kernel, Red Hat Enterprise MRG 2, Red Hat Enterprise Linux 7 for ARM 64, and Red Hat Enterprise Linux 7 for Power 9 LE. Future Linux kernel updates for the respective releases may address this issue.
Red Hat Enterprise MRG 2:
This vulnerability has been rated as having a security impact of Moderate. After evaluation and in accordance with the criteria noted in the product support life cycle, there are no plans to address this issue in an upcoming release. Please contact Red Hat Support for further information.
CVSS v3 metrics
|CVSS3 Base Score||5.5|
|CVSS3 Base Metrics||CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H|
Red Hat Security Errata
|Red Hat Enterprise Linux 7 (kernel-alt)||RHSA-2018:2948||2018-10-30|
|Red Hat Enterprise Linux 6 (kernel)||RHSA-2019:2473||2019-08-13|
|Red Hat Enterprise Linux 7 (kernel)||RHSA-2018:3083||2018-10-30|
|Red Hat Enterprise Linux for Real Time for NFV (v. 7) (kernel-rt)||RHSA-2018:3096||2018-10-30|
Affected Packages State
|Red Hat Enterprise MRG 2||realtime-kernel||Will not fix|
|Red Hat Enterprise Linux 8||kernel||Not affected|
|Red Hat Enterprise Linux 5||kernel||Not affected|