rhsa-2019_1891
Vulnerability from csaf_redhat
Published
2019-07-29 15:22
Modified
2024-09-13 19:52
Summary
Red Hat Security Advisory: kernel-rt security and bug fix update
Notes
Topic
An update for kernel-rt is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: nfs: use-after-free in svc_process_common() (CVE-2018-16884)
* kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation (CVE-2019-11085)
* kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence (CVE-2018-16871)
* kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c (CVE-2019-11811)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* kernel-rt: update to the RHEL7.6.z batch#6 source tree (BZ#1718400)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for kernel-rt is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.\n\nSecurity Fix(es):\n\n* kernel: nfs: use-after-free in svc_process_common() (CVE-2018-16884)\n\n* kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation (CVE-2019-11085)\n\n* kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence (CVE-2018-16871)\n\n* kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c (CVE-2019-11811)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* kernel-rt: update to the RHEL7.6.z batch#6 source tree (BZ#1718400)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1891",
"url": "https://access.redhat.com/errata/RHSA-2019:1891"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1655162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1655162"
},
{
"category": "external",
"summary": "1660375",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660375"
},
{
"category": "external",
"summary": "1709180",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1709180"
},
{
"category": "external",
"summary": "1710405",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1710405"
},
{
"category": "external",
"summary": "1718400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1718400"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/data/csaf/v2/advisories/2019/rhsa-2019_1891.json"
}
],
"title": "Red Hat Security Advisory: kernel-rt security and bug fix update",
"tracking": {
"current_release_date": "2024-09-13T19:52:33+00:00",
"generator": {
"date": "2024-09-13T19:52:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "3.33.3"
}
},
"id": "RHSA-2019:1891",
"initial_release_date": "2019-07-29T15:22:48+00:00",
"revision_history": [
{
"date": "2019-07-29T15:22:48+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-07-29T15:22:48+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-09-13T19:52:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_rt:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Realtime (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_rt:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace-debuginfo@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debuginfo@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace-devel@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-kvm@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace-kvm@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug-debuginfo@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-devel@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-kvm-debuginfo@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug-devel@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug-kvm-debuginfo@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace-kvm-debuginfo@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product": {
"name": "kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_id": "kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug-kvm@3.10.0-957.27.2.rt56.940.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"product": {
"name": "kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"product_id": "kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-doc@3.10.0-957.27.2.rt56.940.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"product": {
"name": "kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"product_id": "kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt@3.10.0-957.27.2.rt56.940.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src"
},
"product_reference": "kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch"
},
"product_reference": "kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
"product_id": "7Server-NFV-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-NFV-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src"
},
"product_reference": "kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch"
},
"product_reference": "kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64 as a component of Red Hat Enterprise Linux Realtime (v. 7)",
"product_id": "7Server-RT-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
},
"product_reference": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"relates_to_product_reference": "7Server-RT-7.6.Z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Hangbin Liu"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Jasu Liedes"
],
"organization": "Synopsys SIG"
}
],
"cve": "CVE-2018-16871",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2018-11-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1655162"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s NFS implementation. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-NFV-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-RT-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-16871"
},
{
"category": "external",
"summary": "RHBZ#1655162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1655162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-16871",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16871"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-16871",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16871"
}
],
"release_date": "2019-06-03T02:23:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-NFV-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-RT-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1891"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-NFV-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-RT-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence"
},
{
"acknowledgments": [
{
"names": [
"Evgenii Shatokhin",
"Vasily Averin"
],
"organization": "Virtuozzo"
}
],
"cve": "CVE-2018-16884",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2018-12-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1660375"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: nfs: use-after-free in svc_process_common()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-NFV-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-RT-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-16884"
},
{
"category": "external",
"summary": "RHBZ#1660375",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660375"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-16884",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16884"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-16884",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16884"
}
],
"release_date": "2018-11-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-NFV-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-RT-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1891"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H",
"version": "3.0"
},
"products": [
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-NFV-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-RT-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: nfs: use-after-free in svc_process_common()"
},
{
"cve": "CVE-2019-11085",
"cwe": {
"id": "CWE-250",
"name": "Execution with Unnecessary Privileges"
},
"discovery_date": "2019-05-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1710405"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s implementation of GVT-g which allowed an attacker with access to a \u0027passed through\u0027 Intel i915 graphics card to possibly access resources allocated to other virtual machines, crash the host, or possibly corrupt memory leading to privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-NFV-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-RT-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11085"
},
{
"category": "external",
"summary": "RHBZ#1710405",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1710405"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11085",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11085"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11085",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11085"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00249.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00249.html"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-NFV-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-RT-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1891"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-NFV-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-RT-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation"
},
{
"cve": "CVE-2019-11811",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1709180"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s implementation of IPMI (remote baseband access). An attacker, with local access to read /proc/ioports, may be able to create a use-after-free condition when the kernel module is unloaded which may result in privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has been rated as \"Moderate\" as the attacker needs to be able to abuse this flaw in a very narrow race condition of the kernel module being unloaded. This scoring system from this flaw differentiates from other sources as the attacker must have a local account to be able to read the file (/proc/ioports) while the module is unloaded. None of the above actions are \u0027network facing\u0027 attack vectors.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-NFV-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-RT-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11811"
},
{
"category": "external",
"summary": "RHBZ#1709180",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1709180"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11811",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11811"
}
],
"release_date": "2019-05-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-NFV-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-RT-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1891"
},
{
"category": "workaround",
"details": "A mitigation to this flaw would be to no longer use IPMI on affected hardware until the kernel has been updated. Existing systems that have IPMI kernel modules loaded will need to unload the \"ipmi_si\" kernel module and blacklist ( See https://access.redhat.com/solutions/41278 for a guide on how to blacklist modules). Take careful consideration that if unloading and blacklisting the module, this creates a one-time attack vector window for a local attacker.",
"product_ids": [
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-NFV-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-RT-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-NFV-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-NFV-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-NFV-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.src",
"7Server-RT-7.6.Z:kernel-rt-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-doc-0:3.10.0-957.27.2.rt56.940.el7.noarch",
"7Server-RT-7.6.Z:kernel-rt-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-devel-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-0:3.10.0-957.27.2.rt56.940.el7.x86_64",
"7Server-RT-7.6.Z:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.27.2.rt56.940.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c"
}
]
}
Loading...