What is RHSA-2017:2444?

RHSA-2017:2444 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: kernel-rt security and bug fix update

Which CVE IDs does RHSA-2017:2444 cover?

RHSA-2017:2444 covers the following CVE IDs: CVE-2015-8970, CVE-2016-10200, CVE-2017-2647. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2017:2444?

RHSA-2017:2444 has a CVSS v3 base score of 7.8, published by Red Hat Product Security.

Which products are affected by RHSA-2017:2444?

RHSA-2017:2444 affects 17 products, including: Red Hat MRG Realtime for RHEL 6 Server v.2; kernel-rt-1:3.10.0-514.rt56.231.el6rt.src as a component of Red Hat MRG Realtime for RHEL 6 Server v.2; kernel-rt-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2; kernel-rt-debug-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2; kernel-rt-debug-debuginfo-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2; and others — see the full list on the advisory page.

RHSA-2017:2444: Red Hat Security Advisory: k…

🔗 CVE IDs covered (3)

CVE-2015-8970 →CVE-2016-10200 →CVE-2017-2647 →

📋 Description

CVE-2015-8970 — kernel: crypto: GPF in lrw_crypt caused by null-deref CVE-2016-10200 — kernel: l2tp: Race condition in the L2TPv3 IP encapsulation feature CVE-2017-2647 — kernel: Null pointer dereference in search_keyring

🎯 Affected products17

Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-1:3.10.0-514.rt56.231.el6rt.src as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-debug-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-debug-debuginfo-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-debug-devel-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-debuginfo-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-debuginfo-common-x86_64-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-devel-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-doc-1:3.10.0-514.rt56.231.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-firmware-1:3.10.0-514.rt56.231.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-trace-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-trace-debuginfo-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-trace-devel-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-vanilla-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-vanilla-debuginfo-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
kernel-rt-vanilla-devel-1:3.10.0-514.rt56.231.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

🔗 CVE IDs covered (3)

📋 Description

🎯 Affected products17

✅ Remediation

🔗 References (8)