RHSA-2017:0817MediumCVSS 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Published
March 21, 2017
Last Modified
November 5, 2026

🔗 CVE IDs covered (10)

CVE-2016-2069 →CVE-2016-2384 →CVE-2016-7042 →CVE-2016-8399 →CVE-2016-9576 →CVE-2016-10088 →CVE-2016-10142 →CVE-2016-6480 →CVE-2016-7097 →CVE-2017-5551 →

📋 Description

CVE-2016-2069 — kernel: race condition in the TLB flush logic CVE-2016-2384 — kernel: double-free in usb-audio triggered by invalid USB descriptor CVE-2016-6480 — kernel: scsi: aacraid: double fetch in ioctl_send_fib() CVE-2016-7042 — kernel: Stack corruption while reading /proc/keys when gcc stack protector is enabled CVE-2016-7097 — kernel: Setting a POSIX ACL via setxattr doesn't clear the setgid bit CVE-2016-8399 — kernel: net: Out of bounds stack read in memcpy_fromiovec CVE-2016-9576 — kernel: Use after free in SCSI generic device interface CVE-2016-10088 — kernel: Use after free in SCSI generic device interface (CVE-2016-9576 regression) CVE-2016-10142 — kernel - IPV6 fragmentation flaw CVE-2017-5551 — kernel: S_ISGD is not cleared when setting posix ACLs in tmpfs (CVE-2016-7097 incomplete fix)

🎯 Affected products188

  • Red Hat Enterprise Linux Desktop (v. 6)
  • Red Hat Enterprise Linux Desktop Optional (v. 6)
  • Red Hat Enterprise Linux HPC Node (v. 6)
  • Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Enterprise Linux Server Optional (v. 6)
  • Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Enterprise Linux Workstation Optional (v. 6)
  • kernel-0:2.6.32-696.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • kernel-0:2.6.32-696.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • kernel-0:2.6.32-696.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • kernel-0:2.6.32-696.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • kernel-0:2.6.32-696.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
  • kernel-0:2.6.32-696.el6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • kernel-0:2.6.32-696.el6.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • kernel-0:2.6.32-696.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)
  • kernel-0:2.6.32-696.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • kernel-0:2.6.32-696.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • kernel-0:2.6.32-696.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • kernel-0:2.6.32-696.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • kernel-0:2.6.32-696.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • kernel-abi-whitelists-0:2.6.32-696.el6.noarch as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • kernel-abi-whitelists-0:2.6.32-696.el6.noarch as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • kernel-abi-whitelists-0:2.6.32-696.el6.noarch as a component of Red Hat Enterprise Linux Server (v. 6)
  • kernel-abi-whitelists-0:2.6.32-696.el6.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • kernel-bootwrapper-0:2.6.32-696.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • kernel-debug-0:2.6.32-696.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • kernel-debug-0:2.6.32-696.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • kernel-debug-0:2.6.32-696.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • kernel-debug-0:2.6.32-696.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • +158 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

🔗 References (16)