Issued:

2015-08-05

Updated:

2015-08-05

RHSA-2015:1534 - Moderate: kernel security and bug fix update

Synopsis

Moderate: kernel security and bug fix update

Type/Severity

Security Advisory Moderate

Topic

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

• An integer overflow flaw was found in the way the Linux kernel's netfilter connection tracking implementation loaded extensions. An attacker on a local network could potentially send a sequence of specially crafted packets that would initiate the loading of a large number of extensions, causing the targeted system in that network to crash. (CVE-2014-9715, Moderate)

• A stack-based buffer overflow flaw was found in the Linux kernel's early load microcode functionality. On a system with UEFI Secure Boot enabled, a local, privileged user could use this flaw to increase their privileges to the kernel (ring0) level, bypassing intended restrictions in place. (CVE-2015-2666, Moderate)

• It was found that the Linux kernel's ping socket implementation did not properly handle socket unhashing during spurious disconnects, which could lead to a use-after-free flaw. On x86-64 architecture systems, a local user able to create ping sockets could use this flaw to crash the system. On non-x86-64 architecture systems, a local user able to create ping sockets could use this flaw to escalate their privileges on the system. (CVE-2015-3636, Moderate)

• It was found that the Linux kernel's TCP/IP protocol suite implementation for IPv6 allowed the Hop Limit value to be set to a smaller value than the default one. An attacker on a local network could use this flaw to prevent systems on that network from sending or receiving network packets. (CVE-2015-2922, Low)

Red Hat would like to thank Nathan Hoad for reporting the CVE-2014-9715 issue.

This update also fixes several bugs. Refer to the following Knowledgebase article for further information:

https://access.redhat.com/articles/1474193

All kernel users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. The system must be rebooted for this update to take effect.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• kernel-kdump-3.10.0-229.11.1.el7.s390x.rpm
• python-perf-debuginfo-3.10.0-229.11.1.el7.x86_64.rpm
• kernel-3.10.0-229.11.1.el7.ppc64.rpm
• python-perf-3.10.0-229.11.1.el7.x86_64.rpm
• kernel-debug-3.10.0-229.11.1.el7.s390x.rpm
• kernel-tools-debuginfo-3.10.0-229.11.1.el7.x86_64.rpm
• python-perf-3.10.0-229.11.1.el7.ppc64.rpm
• kernel-debuginfo-3.10.0-229.11.1.el7.s390x.rpm
• kernel-debuginfo-3.10.0-229.11.1.el7.ppc64.rpm
• kernel-debuginfo-common-x86_64-3.10.0-229.11.1.el7.x86_64.rpm
• kernel-abi-whitelists-3.10.0-229.11.1.el7.noarch.rpm
• kernel-debuginfo-3.10.0-229.11.1.el7.x86_64.rpm
• kernel-devel-3.10.0-229.11.1.el7.ppc64.rpm
• kernel-debug-debuginfo-3.10.0-229.11.1.el7.s390x.rpm
• kernel-3.10.0-229.11.1.el7.x86_64.rpm
• kernel-debuginfo-common-ppc64-3.10.0-229.11.1.el7.ppc64.rpm
• kernel-kdump-debuginfo-3.10.0-229.11.1.el7.s390x.rpm
• perf-debuginfo-3.10.0-229.11.1.el7.s390x.rpm
• perf-3.10.0-229.11.1.el7.ppc64.rpm
• kernel-headers-3.10.0-229.11.1.el7.s390x.rpm
• kernel-3.10.0-229.11.1.el7.s390x.rpm
• perf-3.10.0-229.11.1.el7.x86_64.rpm
• perf-debuginfo-3.10.0-229.11.1.el7.x86_64.rpm
• kernel-tools-libs-devel-3.10.0-229.11.1.el7.x86_64.rpm
• kernel-doc-3.10.0-229.11.1.el7.noarch.rpm
• kernel-headers-3.10.0-229.11.1.el7.x86_64.rpm
• kernel-debug-3.10.0-229.11.1.el7.x86_64.rpm
• kernel-tools-libs-3.10.0-229.11.1.el7.x86_64.rpm
• kernel-devel-3.10.0-229.11.1.el7.x86_64.rpm
• kernel-debug-devel-3.10.0-229.11.1.el7.ppc64.rpm
• kernel-bootwrapper-3.10.0-229.11.1.el7.ppc64.rpm
• kernel-tools-libs-3.10.0-229.11.1.el7.ppc64.rpm
• kernel-headers-3.10.0-229.11.1.el7.ppc64.rpm
• kernel-debuginfo-common-s390x-3.10.0-229.11.1.el7.s390x.rpm
• python-perf-debuginfo-3.10.0-229.11.1.el7.ppc64.rpm
• kernel-debug-devel-3.10.0-229.11.1.el7.x86_64.rpm
• python-perf-3.10.0-229.11.1.el7.s390x.rpm
• kernel-debug-devel-3.10.0-229.11.1.el7.s390x.rpm
• kernel-tools-libs-devel-3.10.0-229.11.1.el7.ppc64.rpm
• python-perf-debuginfo-3.10.0-229.11.1.el7.s390x.rpm
• perf-3.10.0-229.11.1.el7.s390x.rpm
• kernel-kdump-devel-3.10.0-229.11.1.el7.s390x.rpm
• kernel-tools-3.10.0-229.11.1.el7.x86_64.rpm
• kernel-devel-3.10.0-229.11.1.el7.s390x.rpm
• kernel-debug-debuginfo-3.10.0-229.11.1.el7.ppc64.rpm
• kernel-debug-3.10.0-229.11.1.el7.ppc64.rpm
• kernel-tools-debuginfo-3.10.0-229.11.1.el7.ppc64.rpm
• perf-debuginfo-3.10.0-229.11.1.el7.ppc64.rpm
• kernel-debug-debuginfo-3.10.0-229.11.1.el7.x86_64.rpm
• kernel-tools-3.10.0-229.11.1.el7.ppc64.rpm

Fixes

• This content is not included.BZ - 1203712
• This content is not included.BZ - 1204722
• This content is not included.BZ - 1208684
• This content is not included.BZ - 1218074

CVEs

• CVE-2015-2922
• CVE-2015-3636
• CVE-2015-2666
• CVE-2014-9715

References

• https://access.redhat.com/security/updates/classification/#moderate
• https://access.redhat.com/articles/1474193

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.