RHSA-2018:2763: Important: kernel-rt security and bug fix update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.Security Fix(es): kernel: Integer overflow in Linux's createelftables function (CVE-2018-14634) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.Red Hat would like to thank Qualys Research Labs for reporting this issue.Bug Fix(es): The kernel-rt packages have been upgraded to the 3.10.0-862.14.3 source tree, which provides a number of bug fixes over the previous version. (BZ#1616429) Previously, preemption was enabled too early after a context switch. If a task was migrated to another CPU after a context switch, a mismatch between CPU and runqueue during load balancing sometimes occurred. Consequently, a runnable task on an idle CPU failed to run, and the operating system became unresponsive. This update disables preemption in the scheduletail() function. As a result, CPU migration during post-schedule processing no longer occurs, which prevents the above mismatch. The operating system no longer hangs due to this bug. (BZ#1617941)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2018:2763?
The severity of RHSA-2018:2763 is classified as moderate due to the integer overflow vulnerability in Linux's create_elf_tables function.
How do I fix RHSA-2018:2763?
To fix RHSA-2018:2763, update the kernel-rt packages to version 3.10.0-862.14.4.rt56.821.el7.
Which packages are affected by RHSA-2018:2763?
The affected packages include kernel-rt, kernel-rt-debug, kernel-rt-devel, and several associated debug and trace packages.
What does the integer overflow in RHSA-2018:2763 affect?
The integer overflow vulnerability in RHSA-2018:2763 can potentially allow an attacker to crash the system or execute arbitrary code.
Is RHSA-2018:2763 applicable to all Linux systems?
RHSA-2018:2763 specifically impacts Red Hat systems utilizing the Real Time Linux Kernel, not all Linux distributions.