RHSA-2018:2391

Description

Red Hat Security Advisory: kernel security update

CVSS Metrics

• v3.0•HIGH•Score: 7.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Systems

• redhat•kernel

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-abi-whitelists

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-bootwrapper

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-debug

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-debug-debuginfo

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-debug-devel

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-debuginfo

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-debuginfo-common-i686

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-debuginfo-common-ppc64

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-debuginfo-common-s390x

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-debuginfo-common-x86_64

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-devel

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-doc

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-firmware

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-headers

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-kdump

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-kdump-debuginfo

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•kernel-kdump-devel

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•perf

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•perf-debuginfo

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•python-perf

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

• redhat•python-perf-debuginfo

  < 0:2.6.32-573.60.4.el6 | < 0:2.6.32-573.60.4.el6

References (20)

• https://access.redhat.com/errata/RHSA-2018:2391
• https://access.redhat.com/security/updates/classification/#important
• https://access.redhat.com/security/vulnerabilities/L1TF
• https://bugzilla.redhat.com/show_bug.cgi?id=1585005
• https://bugzilla.redhat.com/show_bug.cgi?id=1601849
• https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2391.json
• https://access.redhat.com/security/cve/CVE-2018-3620
• https://www.cve.org/CVERecord?id=CVE-2018-3620
• https://nvd.nist.gov/vuln/detail/CVE-2018-3620
• https://access.redhat.com/articles/3562741
• https://foreshadowattack.eu/
• https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
• https://www.redhat.com/en/blog/deeper-look-l1-terminal-fault-aka-foreshadow
• https://www.redhat.com/en/blog/understanding-l1-terminal-fault-aka-foreshadow-what-you-need-know
• https://access.redhat.com/security/cve/CVE-2018-3646
• https://www.cve.org/CVERecord?id=CVE-2018-3646
• https://nvd.nist.gov/vuln/detail/CVE-2018-3646
• https://access.redhat.com/security/cve/CVE-2018-10901
• https://www.cve.org/CVERecord?id=CVE-2018-10901
• https://nvd.nist.gov/vuln/detail/CVE-2018-10901