kernel-3.10.0-693.21.1.el7

エラータID: AXSA:2018-2625:03

Release date: 
Monday, March 19, 2018 - 09:43
Subject: 
kernel-3.10.0-693.21.1.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

The kernel packages contain the Linux kernel, the core of any Linux operating system.

These updated kernel packages include several security issues and numerous
bug fixes, some of which you can see below. Space precludes documenting
all of these bug fixes in this advisory. To see the complete list of bug
fixes, users are directed to the related Knowledge Article:
https://access.redhat.com/articles/3368501.

Security Fix(es):

* Kernel: KVM: MMU potential stack buffer overrun during page walks (CVE-2017-12188, Important)

* Kernel: KVM: debug exception via syscall emulation (CVE-2017-7518, Moderate)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2017-12188
arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested
virtualisation is used, does not properly traverse guest pagetable
entries to resolve a guest virtual address, which allows L1 guest OS
users to execute arbitrary code on the host OS or cause a denial of
service (incorrect index during page walking, and host OS crash), aka
an "MMU potential stack buffer overrun."
CVE-2017-7518
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. kernel-3.10.0-693.21.1.el7.src.rpm
    MD5: e1b834cf6995f6def70bcccd33103f37
    SHA-256: 315913be1d6b630e88fb1f116174a4492465541ec3b6fa2533f4aa11cc9e9858
    Size: 88.95 MB

Asianux Server 7 for x86_64
  1. kernel-3.10.0-693.21.1.el7.x86_64.rpm
    MD5: 4af31b74e7f9a0ecd47cdedf0e44fa4e
    SHA-256: 04d90604868f56ce898945cd2db680133908fd97d5493fbba04a3eae0d1eac6c
    Size: 43.24 MB
  2. kernel-abi-whitelists-3.10.0-693.21.1.el7.noarch.rpm
    MD5: 9ff9097049c681bc62c28a136bea7633
    SHA-256: 8f3f12df999d13a431ced358f550f3c7ba40da4fd25fe087fdc51db3ed7f0a10
    Size: 5.07 MB
  3. kernel-debug-3.10.0-693.21.1.el7.x86_64.rpm
    MD5: d49a330e8ffaae4b8d7f0343ff187520
    SHA-256: 57c3805fceca04efd3de65a576e0fbb914d273fbfdd6c533bdd821924605fdaa
    Size: 45.18 MB
  4. kernel-debug-devel-3.10.0-693.21.1.el7.x86_64.rpm
    MD5: d684de0cc2ed4a703b6bbf763e5b32c7
    SHA-256: 7095644f526c877c6721e46989a3c7b0f658de33fdd4af0ce350c639cd4871c1
    Size: 14.44 MB
  5. kernel-devel-3.10.0-693.21.1.el7.x86_64.rpm
    MD5: 00bbd609cf084846e540b03d5c34ff7d
    SHA-256: 7e10b15486a33b1404105f18c09b8da801699a832a677bc5af94e30190e3ac4d
    Size: 14.37 MB
  6. kernel-doc-3.10.0-693.21.1.el7.noarch.rpm
    MD5: 7f5731862c3bb5adf4150bf7fa4d670b
    SHA-256: 62cd6f83943174ae2a3d37d9a43e4dca017df466e4bc20542823fa849ff9e25d
    Size: 16.25 MB
  7. kernel-headers-3.10.0-693.21.1.el7.x86_64.rpm
    MD5: b291ce1043db804e3803575ab9de4556
    SHA-256: 8bd5eb203d282a3ac53397eabfe919926fe11b51903d0ef155d0df7803c6826f
    Size: 6.00 MB
  8. kernel-tools-3.10.0-693.21.1.el7.x86_64.rpm
    MD5: 5aa9d37bf16eb85373328c81fb479030
    SHA-256: 411958f2ae289044cb7a347db835d9f5c6689640882a4c2f76c9afc38d2a1a46
    Size: 5.15 MB
  9. kernel-tools-libs-3.10.0-693.21.1.el7.x86_64.rpm
    MD5: bd4c6dbfa661aec889382aec354e942b
    SHA-256: 81b8de5ffe07a50c6594ac1ae75b38c929ab9d961999982174f717c30fcc21ae
    Size: 5.07 MB
  10. perf-3.10.0-693.21.1.el7.x86_64.rpm
    MD5: 0740527b8b7a246934d7530f48a3d146
    SHA-256: 1b0c70260f9c7e1c7554d0b64ddbfabe35345d1677f4575054bd361412a8049d
    Size: 6.47 MB
  11. python-perf-3.10.0-693.21.1.el7.x86_64.rpm
    MD5: ee40d972ccafeab42f904b4de8251db3
    SHA-256: b9e413964f1a92d38e1db409b18ed97cf20d3a1feee57f2db8c46f6c451f05a1
    Size: 5.16 MB