KernelCare
unread,Feb 10, 2020, 11:30:07 AM2/10/20Sign in to reply to author
Sign in to forward
You do not have permission to delete messages in this group
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to kernelcar...@googlegroups.com
Dear Customers,
KernelCare prepared security updates for your system.
Systems with AUTO_UPDATE=True (DEFAULT) in /etc/sysconfig/kcare/kcare.conf will automatically update, and no action is needed for them.
You can manually update the server by running:
/usr/bin/kcarectl --update
Changelog:
rhel7:
CVE-2018-13093: An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel
through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow()
on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image.
This occurs because of a lack of proper validation that cached inodes are free
during allocation.
CVE-2018-13094: An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the
Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after
xfs_da_shrink_inode() is called with a NULL bp.
CVE-2018-13095: An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the
Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can
occur for a corrupted xfs image upon encountering an inode that is in extent format,
but has more extents than fit in the inode fork.
cvelist: [CVE-2018-13093, CVE-2018-13094, CVE-2018-13095]
latest-version: kernel-3.10.0-1062.12.1.el7
oel7:
CVE-2018-13093: An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel
through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow()
on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image.
This occurs because of a lack of proper validation that cached inodes are free
during allocation.
CVE-2018-13094: An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the
Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after
xfs_da_shrink_inode() is called with a NULL bp.
CVE-2018-13095: An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the
Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can
occur for a corrupted xfs image upon encountering an inode that is in extent format,
but has more extents than fit in the inode fork.
cvelist: [CVE-2018-13093, CVE-2018-13094, CVE-2018-13095]
latest-version: kernel-3.10.0-1062.12.1.el7