Synopsis: Important: kernel security, bug fix, and enhancement update
Advisory ID: SLSA-2019:0512-1
Issue Date: 2019-03-14
CVE Numbers: CVE-2018-17972
CVE-2018-18445
CVE-2018-9568
—
Security Fix(es):
* kernel: Memory corruption due to incorrect socket cloning
(CVE-2018-9568)
* kernel: Unprivileged users able to inspect kernel stacks of arbitrary
tasks (CVE-2018-17972)
* kernel: Faulty computation of numberic bounds in the BPF verifier
(CVE-2018-18445)
Bug Fix(es) and Enhancement(s):
* kernel fuse invalidates cached attributes during reads
* [NetApp-FC-NVMe] SL7.6: nvme reset gets hung indefinitely
* Memory reclaim deadlock calling __sock_create() after
memalloc_noio_save()
* hardened usercopy is causing crash
* Backport: xfrm: policy: init locks early
* AWS m5 instance type loses NVMe mounted volumes [was: Unable to Mount
StatefulSet PV in AWS EBS]
* SL 7.6 running on a VirtualBox guest with a GUI has a mouse problem
* Kernel bug report in cgroups on heavily contested 3.10 node
* [PCIe] SHPC probe crash on Non-ACPI/Non-SHPC ports
* [Cavium 7.7 Feat] qla2xxx: Update to latest upstream.
* Regression in lpfc and the CNE1000 (BE2 FCoE) adapters that no longer
initialize
* [csiostor] call trace after command: modprobe csiostor
* libceph: fall back to sendmsg for slab pages
* Deadlock between stop_one_cpu_nowait() and stop_two_cpus()
* Soft lockups occur when the sd driver passes a device size of 1 sector
to string_get_size()
* [SL7.7] BUG: unable to handle kernel paging request at ffffffffffffffff
* SL7.6 – powerpc/pseries: Disable CPU hotplug across migrations /
powerpc/rtas: Fix a potential race between CPU-Offline & Migration (LPM)
* blk-mq: fix corruption with direct issue
* [SL7][patch] iscsi driver can block reboot/shutdown
* [DELL EMC 7.6 BUG] Unable to create-namespace over Dell NVDIMM-N
* efi_bgrt_init fails to ioremap error during boot
* Unable to mount a share on kernel- 3.10.0-957.el7. The share can be
mounted on kernel-3.10.0-862.14.4.el7
* System crash with RIP nfs_readpage_async+0x43 — BUG: unable to handle
kernel NULL pointer dereference
—
SL7
x86_64
bpftool-3.10.0-957.10.1.el7.x86_64.rpm
kernel-3.10.0-957.10.1.el7.x86_64.rpm
kernel-debug-3.10.0-957.10.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-957.10.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-957.10.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-957.10.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-957.10.1.el7.x86_64.rpm
kernel-devel-3.10.0-957.10.1.el7.x86_64.rpm
kernel-headers-3.10.0-957.10.1.el7.x86_64.rpm
kernel-tools-3.10.0-957.10.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-957.10.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-957.10.1.el7.x86_64.rpm
perf-3.10.0-957.10.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-957.10.1.el7.x86_64.rpm
python-perf-3.10.0-957.10.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-957.10.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-957.10.1.el7.x86_64.rpm
noarch
kernel-abi-whitelists-3.10.0-957.10.1.el7.noarch.rpm
kernel-doc-3.10.0-957.10.1.el7.noarch.rpm
– Scientific Linux Development Team
