Security restrictions bypass in Linux kernel - CVE-2018-13405

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU13631

Security restrictions bypass in Linux kernel - CVE-2018-13405

Published: July 10, 2018


Vulnerability identifier: #VU13631
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-13405
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local attacker to create arbitrary files on the target system.

The vulnerability exists due to the inode_init_owner function, as defined in the fs/inode.c source code file, allows the creation of arbitrary files in set-group identification (SGID) directories. A local attacker can create arbitrary files with unintended group ownership.


Affected software

Linux kernel
Debian Linux
SUSE CaaS Platform
SUSE MicroOS
Red Hat Enterprise Linux Server
SUSE Enterprise Storage
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server - AUS
CentOS
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for IBM System z (Structure A)
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Red Hat Enterprise Linux Server - Extended Update Support
HPE Helion Openstack
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Red Hat Enterprise Linux for Real Time
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for ARM 64
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Live Patching
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Real Time Extension
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Module for Live Patching
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Legacy Software
SUSE Linux Enterprise Module for Realtime
SUSE Linux Enterprise Module for Public Cloud
openEuler
Fedora
Opensuse

BIG-IP
MRG Realtime
kernel (Red Hat package)
kernel-rt (Red Hat package)
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
netcf-libs
netcf-devel
netcf
sgabios
sgabios-bin
ocaml-libnbd-devel
ocaml-libnbd
libnbd
libnbd-devel
nbdfuse
python3-libnbd
libvirt-dbus
kernel-livepatch-4_12_14-197_102-default
perl-hivex
ocaml-hivex-devel
ocaml-hivex
ruby-hivex
python3-hivex
hivex-devel
hivex
kgraft-patch-4_4_180-94_150-default
kgraft-patch-4_4_180-94_150-default-debuginfo
kernel-livepatch-SLE15-SP2_Update_21-debugsource
kernel-livepatch-5_3_18-24_93-default-debuginfo
kernel-livepatch-5_3_18-24_93-default
kgraft-patch-4_12_14-95_83-default
kernel-livepatch-5_3_18-59_34-default
kernel-livepatch-5_3_18-59_30-default
kgraft-patch-4_12_14-122_98-default
seavgabios-bin
seabios-bin
seabios
nbdkit-python-plugin
nbdkit-bash-completion
nbdkit
nbdkit-basic-filters
nbdkit-basic-plugins
nbdkit-curl-plugin
nbdkit-devel
nbdkit-example-plugins
nbdkit-gzip-plugin
nbdkit-linuxdisk-plugin
nbdkit-server
nbdkit-xz-filter
nbdkit-ssh-plugin
nbdkit-vddk-plugin
libiscsi
libiscsi-devel
libiscsi-utils
libguestfs-java
libguestfs-gobject-devel
libguestfs-gobject
libguestfs-gfs2
libguestfs-devel
libguestfs-tools-c
libguestfs-xfs
libguestfs-benchmarking
libguestfs-java-devel
libguestfs
libguestfs-rescue
libguestfs-rsync
python3-libguestfs
libguestfs-tools
ruby-libguestfs
virt-dib
perl-Sys-Guestfs
virt-v2v
ocaml-libguestfs-devel
ocaml-libguestfs
libguestfs-bash-completion
libguestfs-inspect-icons
libguestfs-javadoc
libguestfs-man-pages-ja
libguestfs-man-pages-uk
lua-guestfs
qemu-kvm-block-gluster
qemu-guest-agent
qemu-img
qemu-kvm
qemu-kvm-block-curl
qemu-kvm-block-iscsi
qemu-kvm-block-ssh
qemu-kvm-common
qemu-kvm-core
qemu-kvm-tests
qemu-kvm-block-rbd
kernel-default
kernel-source
kernel-macros
kernel-devel
kernel-default-base
kernel-default-base-debuginfo
kernel-default-debuginfo
kernel-default-debugsource
kernel-default-devel
kernel-syms
dlm-kmp-default
ocfs2-kmp-default
dlm-kmp-default-debuginfo
kernel-default-kgraft
cluster-md-kmp-default
kernel-default-man
cluster-md-kmp-default-debuginfo
gfs2-kmp-default
ocfs2-kmp-default-debuginfo
gfs2-kmp-default-debuginfo
gfs2-kmp-rt-debuginfo
cluster-md-kmp-rt
cluster-md-kmp-rt-debuginfo
dlm-kmp-rt
gfs2-kmp-rt
kernel-source-rt
kernel-devel-rt
ocfs2-kmp-rt-debuginfo
ocfs2-kmp-rt
kernel-syms-rt
kernel-rt_debug-devel-debuginfo
kernel-rt_debug-devel
kernel-rt_debug-debugsource
kernel-rt_debug-debuginfo
kernel-rt-devel-debuginfo
kernel-rt-devel
kernel-rt-debugsource
kernel-rt-debuginfo
kernel-rt-base-debuginfo
kernel-rt-base
kernel-rt
dlm-kmp-rt-debuginfo
kernel-rt_debug
kernel-default-kgraft-devel
kernel-default-devel-debuginfo
kernel-docs
kernel-obs-build-debugsource
kernel-obs-build
kernel-default-extra-debuginfo
kernel-default-extra
kernel-zfcpdump-debuginfo
kernel-default-livepatch-devel
kernel-default-livepatch
kernel-zfcpdump-debugsource
reiserfs-kmp-default-debuginfo
reiserfs-kmp-default
kernel-alt (Red Hat package)
kernel
kernel-doc
kernel-abi-stablelists
python3-perf
perf
kernel-tools-libs
kernel-tools
kernel-modules-extra
kernel-modules
kernel-headers
kernel-debug-modules-extra
kernel-debug-modules
kernel-debug-devel
kernel-debug-core
kernel-debug
kernel-cross-headers
kernel-core
bpftool
kernel-tools-libs-devel
python-perf
kernel-modules-internal
supermin-devel
supermin
qemu
kernel-syms-azure
kernel-azure
kernel-azure-debuginfo
kernel-azure-debugsource
kernel-azure-devel
kernel-azure-devel-debuginfo
kernel-devel-azure
kernel-source-azure
kernel-preempt
kernel-preempt-extra
kernel-preempt-extra-debuginfo
kernel-preempt-devel-debuginfo
kernel-preempt-devel
kernel-preempt-debugsource
kernel-preempt-debuginfo
kernel-64kb
kernel-64kb-debuginfo
kernel-64kb-debugsource
kernel-64kb-devel
kernel-64kb-devel-debuginfo
kernel-zfcpdump
python3-libvirt
perl-Sys-Virt
libvirt-daemon-driver-secret
libvirt-daemon-driver-storage
libvirt-daemon-driver-qemu
libvirt-daemon-driver-storage-core
libvirt-daemon-driver-storage-disk
libvirt-daemon-driver-storage-gluster
libvirt-lock-sanlock
libvirt-daemon-driver-nwfilter
libvirt-daemon-driver-storage-iscsi
libvirt-daemon-driver-nodedev
libvirt-daemon-driver-network
libvirt-daemon-driver-interface
libvirt-daemon-config-nwfilter
libvirt-daemon-config-network
libvirt-daemon
libvirt-client
libvirt-bash-completion
libvirt-admin
libvirt
libvirt-daemon-driver-storage-logical
libvirt-daemon-driver-storage-mpath
libvirt-daemon-driver-storage-rbd
libvirt-daemon-driver-storage-scsi
libvirt-daemon-kvm
libvirt-devel
libvirt-docs
libvirt-libs
libvirt-nss
libvirt-daemon-driver-storage-iscsi-direct
qemu-block-iscsi
qemu-block-curl
qemu-block-rbd
qemu-system-aarch64
qemu-block-ssh
qemu-system-x86_64
qemu-debugsource
qemu-system-arm
qemu-hw-usb-host
qemu-debuginfo
qemu-system-riscv
qemu-help
qemu-seabios
libguestfs-winsupport
Traffix SDC
BIG-IQ Centralized Management
Dell EMC VxRail Appliance

How to mitigate CVE-2018-13405

Update to version 4.17.4.

Linux kernel - update to 4.17.4
BIG-IP - addressed in versions 13.1.3.5, 14.1.3.1, 15.0.1.4, 15.1.1, 16.0.1
kernel (Red Hat package) - addressed in versions 2.6.32-504.80.2.el6, 2.6.32-754.12.1.el6, 3.10.0-327.83.1.el7, 3.10.0-514.71.1.el7, 3.10.0-693.58.1.el7, 3.10.0-862.41.1.el7, 3.10.0-1160.76.1.el7, 3.10.0-1160.88.1.el7, 4.18.0-305.49.1.el8_4, 4.18.0-372.9.1.el8
kernel-rt (Red Hat package) - addressed in versions 3.10.0-693.58.1.rt56.652.el6rt, 4.18.0-305.49.1.rt7.121.el8_4, 4.18.0-372.9.1.rt7.166.el8
netcf-libs - update to 0.2.8-12
netcf-devel - update to 0.2.8-12
netcf - update to 0.2.8-12
sgabios - update to 0.20170427git-3
sgabios-bin - update to 0.20170427git-3
ocaml-libnbd-devel - update to 1.2.2-1.0.1
ocaml-libnbd - update to 1.2.2-1.0.1
libnbd - update to 1.2.2-1.0.1
libnbd-devel - update to 1.2.2-1.0.1
nbdfuse - update to 1.2.2-1.0.1
python3-libnbd - update to 1.2.2-1.0.1
libvirt-dbus - update to 1.3.0-2
kernel-livepatch-4_12_14-197_102-default - update to 1-3.3.1
perl-hivex - update to 1.3.18-21
ocaml-hivex-devel - update to 1.3.18-21
ocaml-hivex - update to 1.3.18-21
ruby-hivex - update to 1.3.18-21
python3-hivex - update to 1.3.18-21
hivex-devel - update to 1.3.18-21
hivex - update to 1.3.18-21
kgraft-patch-4_4_180-94_150-default - update to 1-4.3.1
kgraft-patch-4_4_180-94_150-default-debuginfo - update to 1-4.3.1
kernel-livepatch-SLE15-SP2_Update_21-debugsource - update to 1-5.3.5
kernel-livepatch-5_3_18-24_93-default-debuginfo - update to 1-5.3.5
kernel-livepatch-5_3_18-24_93-default - update to 1-5.3.5
kgraft-patch-4_12_14-95_83-default - update to 1-6.3.1
kernel-livepatch-5_3_18-59_34-default - update to 1-7.3.1
kernel-livepatch-5_3_18-59_30-default - update to 1-7.3.1
kgraft-patch-4_12_14-122_98-default - update to 1-8.7.1
seavgabios-bin - update to 1.13.0-2
seabios-bin - update to 1.13.0-2
seabios - update to 1.13.0-2
nbdkit-python-plugin - update to 1.16.2-4
nbdkit-bash-completion - update to 1.16.2-4
nbdkit - update to 1.16.2-4
nbdkit-basic-filters - update to 1.16.2-4
nbdkit-basic-plugins - update to 1.16.2-4
nbdkit-curl-plugin - update to 1.16.2-4
nbdkit-devel - update to 1.16.2-4
nbdkit-example-plugins - update to 1.16.2-4
nbdkit-gzip-plugin - update to 1.16.2-4
nbdkit-linuxdisk-plugin - update to 1.16.2-4
nbdkit-server - update to 1.16.2-4
nbdkit-xz-filter - update to 1.16.2-4
nbdkit-ssh-plugin - update to 1.16.2-4
nbdkit-vddk-plugin - update to 1.16.2-4
libiscsi - update to 1.18.0-8.0.1
libiscsi-devel - update to 1.18.0-8.0.1
libiscsi-utils - update to 1.18.0-8.0.1
libguestfs-java - update to 1.40.2-28.0.1
libguestfs-gobject-devel - update to 1.40.2-28.0.1
libguestfs-gobject - update to 1.40.2-28.0.1
libguestfs-gfs2 - update to 1.40.2-28.0.1
libguestfs-devel - update to 1.40.2-28.0.1
libguestfs-tools-c - update to 1.40.2-28.0.1
libguestfs-xfs - update to 1.40.2-28.0.1
libguestfs-benchmarking - update to 1.40.2-28.0.1
libguestfs-java-devel - update to 1.40.2-28.0.1
libguestfs - update to 1.40.2-28.0.1
libguestfs-rescue - update to 1.40.2-28.0.1
libguestfs-rsync - update to 1.40.2-28.0.1
python3-libguestfs - update to 1.40.2-28.0.1
libguestfs-tools - update to 1.40.2-28.0.1
ruby-libguestfs - update to 1.40.2-28.0.1
virt-dib - update to 1.40.2-28.0.1
perl-Sys-Guestfs - update to 1.40.2-28.0.1
virt-v2v - update to 1.40.2-28.0.1
ocaml-libguestfs-devel - update to 1.40.2-28.0.1
ocaml-libguestfs - update to 1.40.2-28.0.1
libguestfs-bash-completion - update to 1.40.2-28.0.1
libguestfs-inspect-icons - update to 1.40.2-28.0.1
libguestfs-javadoc - update to 1.40.2-28.0.1
libguestfs-man-pages-ja - update to 1.40.2-28.0.1
libguestfs-man-pages-uk - update to 1.40.2-28.0.1
lua-guestfs - update to 1.40.2-28.0.1
qemu-kvm-block-gluster - update to 4.2.0-59.0.2
qemu-guest-agent - update to 4.2.0-59.0.2
qemu-img - update to 4.2.0-59.0.2
qemu-kvm - update to 4.2.0-59.0.2
qemu-kvm-block-curl - update to 4.2.0-59.0.2
qemu-kvm-block-iscsi - update to 4.2.0-59.0.2
qemu-kvm-block-ssh - update to 4.2.0-59.0.2
qemu-kvm-common - update to 4.2.0-59.0.2
qemu-kvm-core - update to 4.2.0-59.0.2
qemu-kvm-tests - update to 4.2.0-59.0.2
qemu-kvm-block-rbd - update to 4.2.0-59.0.2
kernel-default - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-source - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-macros - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-devel - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-default-base - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1.9.42.5, 5.3.18-59.30.1.18.17.1, 5.3.18-59.34.1.18.21.1
kernel-default-base-debuginfo - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2
kernel-default-debuginfo - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-default-debugsource - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-default-devel - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-syms - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
dlm-kmp-default - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
ocfs2-kmp-default - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
dlm-kmp-default-debuginfo - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-default-kgraft - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1
cluster-md-kmp-default - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-default-man - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2
cluster-md-kmp-default-debuginfo - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
gfs2-kmp-default - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
ocfs2-kmp-default-debuginfo - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
gfs2-kmp-default-debuginfo - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
gfs2-kmp-rt-debuginfo - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
cluster-md-kmp-rt - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
cluster-md-kmp-rt-debuginfo - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
dlm-kmp-rt - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
gfs2-kmp-rt - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
kernel-source-rt - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
kernel-devel-rt - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
ocfs2-kmp-rt-debuginfo - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
ocfs2-kmp-rt - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
kernel-syms-rt - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
kernel-rt_debug-devel-debuginfo - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
kernel-rt_debug-devel - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
kernel-rt_debug-debugsource - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
kernel-rt_debug-debuginfo - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
kernel-rt-devel-debuginfo - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
kernel-rt-devel - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
kernel-rt-debugsource - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
kernel-rt-debuginfo - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
kernel-rt-base-debuginfo - update to 4.12.14-10.65.1
kernel-rt-base - update to 4.12.14-10.65.1
kernel-rt - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
dlm-kmp-rt-debuginfo - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1, 5.3.18-60.1
kernel-rt_debug - addressed in versions 4.12.14-10.65.1, 5.3.18-57.1
kernel-default-kgraft-devel - addressed in versions 4.12.14-95.83.2, 4.12.14-122.98.1
kernel-default-devel-debuginfo - addressed in versions 4.12.14-95.83.2, 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-docs - addressed in versions 4.12.14-122.98.1, 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-obs-build-debugsource - addressed in versions 4.12.14-122.98.1, 4.12.14-197.102.1, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-obs-build - addressed in versions 4.12.14-122.98.1, 4.12.14-197.102.1, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-default-extra-debuginfo - addressed in versions 4.12.14-122.98.1, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-default-extra - addressed in versions 4.12.14-122.98.1, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-zfcpdump-debuginfo - addressed in versions 4.12.14-197.102.2, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-default-livepatch-devel - addressed in versions 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-default-livepatch - addressed in versions 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-zfcpdump-debugsource - addressed in versions 4.12.14-197.102.2, 5.3.18-59.30.1, 5.3.18-59.34.1
reiserfs-kmp-default-debuginfo - addressed in versions 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
reiserfs-kmp-default - addressed in versions 4.12.14-197.102.2, 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-alt (Red Hat package) - update to 4.14.0-115.el7a
kernel - addressed in versions 4.17.5-100.fc27, 4.17.5-200.fc28
kernel-doc - update to 4.18.0-372.9.1
kernel-abi-stablelists - update to 4.18.0-372.9.1
python3-perf - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
perf - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
kernel-tools-libs - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
kernel-tools - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
kernel-modules-extra - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
kernel-modules - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
kernel-headers - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
kernel-devel - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
kernel-debug-modules-extra - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
kernel-debug-modules - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
kernel-debug-devel - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
kernel-debug-core - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
kernel-debug - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
kernel-cross-headers - update to 4.18.0-372.9.1
kernel-core - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
kernel - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
bpftool - addressed in versions 4.18.0-372.9.1, 4.19.91-26.6, 4.19.91-27, 5.10.134-13
kernel-tools-libs-devel - addressed in versions 4.19.91-26.6, 4.19.91-27
python-perf - addressed in versions 4.19.91-26.6, 4.19.91-27
kernel-modules-internal - addressed in versions 4.19.91-26.6, 5.10.134-13
supermin-devel - update to 5.1.19-10
supermin - update to 5.1.19-10
qemu - addressed in versions 5.2.0-9.fc34, 6.1.0-14.fc35, 6.2.0-4.fc36.1, 6.2.0-5.fc37
kernel-syms-azure - addressed in versions 5.3.18-18.72.1, 5.3.18-38.28.1
kernel-azure - addressed in versions 5.3.18-18.72.2, 5.3.18-38.28.2
kernel-azure-debuginfo - addressed in versions 5.3.18-18.72.2, 5.3.18-38.28.2
kernel-azure-debugsource - addressed in versions 5.3.18-18.72.2, 5.3.18-38.28.2
kernel-azure-devel - addressed in versions 5.3.18-18.72.2, 5.3.18-38.28.2
kernel-azure-devel-debuginfo - addressed in versions 5.3.18-18.72.2, 5.3.18-38.28.2
kernel-devel-azure - addressed in versions 5.3.18-18.72.2, 5.3.18-38.28.2
kernel-source-azure - addressed in versions 5.3.18-18.72.2, 5.3.18-38.28.2
kernel-preempt - addressed in versions 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-preempt-extra - addressed in versions 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-preempt-extra-debuginfo - addressed in versions 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-preempt-devel-debuginfo - addressed in versions 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-preempt-devel - addressed in versions 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-preempt-debugsource - addressed in versions 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-preempt-debuginfo - addressed in versions 5.3.18-24.93.1, 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-64kb - addressed in versions 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-64kb-debuginfo - addressed in versions 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-64kb-debugsource - addressed in versions 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-64kb-devel - addressed in versions 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-64kb-devel-debuginfo - addressed in versions 5.3.18-59.30.1, 5.3.18-59.34.1
kernel-zfcpdump - addressed in versions 5.3.18-59.30.1, 5.3.18-59.34.1
python3-libvirt - update to 6.0.0-1
perl-Sys-Virt - update to 6.0.0-1
libvirt-daemon-driver-secret - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-qemu - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-core - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-disk - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-gluster - update to 6.0.0-37.1.0.1
libvirt-lock-sanlock - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-nwfilter - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-iscsi - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-nodedev - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-network - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-interface - update to 6.0.0-37.1.0.1
libvirt-daemon-config-nwfilter - update to 6.0.0-37.1.0.1
libvirt-daemon-config-network - update to 6.0.0-37.1.0.1
libvirt-daemon - update to 6.0.0-37.1.0.1
libvirt-client - update to 6.0.0-37.1.0.1
libvirt-bash-completion - update to 6.0.0-37.1.0.1
libvirt-admin - update to 6.0.0-37.1.0.1
libvirt - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-logical - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-mpath - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-rbd - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-scsi - update to 6.0.0-37.1.0.1
libvirt-daemon-kvm - update to 6.0.0-37.1.0.1
libvirt-devel - update to 6.0.0-37.1.0.1
libvirt-docs - update to 6.0.0-37.1.0.1
libvirt-libs - update to 6.0.0-37.1.0.1
libvirt-nss - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-iscsi-direct - update to 6.0.0-37.1.0.1
qemu - update to 6.2.0-43
qemu-block-iscsi - update to 6.2.0-43
qemu-block-curl - update to 6.2.0-43
qemu-block-rbd - update to 6.2.0-43
qemu-system-aarch64 - update to 6.2.0-43
qemu-block-ssh - update to 6.2.0-43
qemu-img - update to 6.2.0-43
qemu-system-x86_64 - update to 6.2.0-43
qemu-debugsource - update to 6.2.0-43
qemu-system-arm - update to 6.2.0-43
qemu-guest-agent - update to 6.2.0-43
qemu-hw-usb-host - update to 6.2.0-43
qemu-debuginfo - update to 6.2.0-43
qemu-system-riscv - update to 6.2.0-43
qemu-help - update to 6.2.0-43
qemu-seabios - update to 6.2.0-43
Dell EMC VxRail Appliance - update to 7.0.411
libguestfs-winsupport - update to 8.2-1

External References

Related Security Bulletins