Scientific Linux alert SLSA-2017:0386-1 (kernel)

From:
    	     
 
Pat Riehecky <riehecky@fnal.gov> 
To:
    	     
 
<scientific-linux-errata@listserv.fnal.gov> 
Subject:
    	     
 
Security ERRATA Important: kernel on SL7.x x86_64 
Date:
    	     
 
Thu, 2 Mar 2017 21:27:34 +0000
Message-ID:
    	     
 
<20170302212734.25641.62662@slpackages.fnal.gov>
Synopsis:          Important: kernel security, bug fix, and enhancement update
Advisory ID:       SLSA-2017:0386-1
Issue Date:        2017-03-02
CVE Numbers:       CVE-2016-9083
                   CVE-2016-9084
                   CVE-2016-8630
                   CVE-2016-8655
--

Security Fix(es):

* Linux kernel built with the Kernel-based Virtual Machine (CONFIG_KVM)
support is vulnerable to a null pointer dereference flaw. It could occur
on x86 platform, when emulating an undefined instruction. An attacker
could use this flaw to crash the host kernel resulting in DoS.
(CVE-2016-8630, Important)

* A race condition issue leading to a use-after-free flaw was found in the
way the raw packet sockets implementation in the Linux kernel networking
subsystem handled synchronization while creating the TPACKET_V3 ring
buffer. A local user able to open a raw packet socket (requires the
CAP_NET_RAW capability) could use this flaw to elevate their privileges on
the system. (CVE-2016-8655, Important)

* A flaw was discovered in the Linux kernel's implementation of VFIO. An
attacker issuing an ioctl can create a situation where memory is corrupted
and modify memory outside of the expected area. This may overwrite kernel
memory and subvert kernel execution. (CVE-2016-9083, Important)

* The use of a kzalloc with an integer multiplication allowed an integer
overflow condition to be reached in vfio_pci_intrs.c. This combined with
CVE-2016-9083 may allow an attacker to craft an attack and use unallocated
memory, potentially crashing the machine. (CVE-2016-9084, Moderate)
--

SL7
  x86_64
    kernel-3.10.0-514.10.2.el7.x86_64.rpm
    kernel-debug-3.10.0-514.10.2.el7.x86_64.rpm
    kernel-debug-debuginfo-3.10.0-514.10.2.el7.x86_64.rpm
    kernel-debug-devel-3.10.0-514.10.2.el7.x86_64.rpm
    kernel-debuginfo-3.10.0-514.10.2.el7.x86_64.rpm
    kernel-debuginfo-common-x86_64-3.10.0-514.10.2.el7.x86_64.rpm
    kernel-devel-3.10.0-514.10.2.el7.x86_64.rpm
    kernel-headers-3.10.0-514.10.2.el7.x86_64.rpm
    kernel-tools-3.10.0-514.10.2.el7.x86_64.rpm
    kernel-tools-debuginfo-3.10.0-514.10.2.el7.x86_64.rpm
    kernel-tools-libs-3.10.0-514.10.2.el7.x86_64.rpm
    perf-3.10.0-514.10.2.el7.x86_64.rpm
    perf-debuginfo-3.10.0-514.10.2.el7.x86_64.rpm
    python-perf-3.10.0-514.10.2.el7.x86_64.rpm
    python-perf-debuginfo-3.10.0-514.10.2.el7.x86_64.rpm
    kernel-tools-libs-devel-3.10.0-514.10.2.el7.x86_64.rpm
  noarch
    kernel-abi-whitelists-3.10.0-514.10.2.el7.noarch.rpm
    kernel-doc-3.10.0-514.10.2.el7.noarch.rpm

- Scientific Linux Development Team