Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.6
Red Hat Enterprise Linux Kernel Vulnerability: Data Exposure
published 2 years ago
Summary
A vulnerability in the Red Hat Enterprise Linux kernel allows an attacker to potentially access sensitive information. This issue affects the security of systems running Red Hat Enterprise Linux. To protect your system, apply the latest kernel update provided by Red Hat.
What to do
- Update redhat kernel to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-abi-whitelists to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-bootwrapper to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-debug to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-debug-debuginfo to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-debug-devel to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-debuginfo to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-debuginfo-common-i686 to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-debuginfo-common-ppc64 to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-debuginfo-common-s390x to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-debuginfo-common-x86_64 to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-devel to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-doc to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-firmware to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-headers to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-kdump to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-kdump-debuginfo to version 0:2.6.32-573.60.1.el6.
- Update redhat kernel-kdump-devel to version 0:2.6.32-573.60.1.el6.
- Update redhat perf to version 0:2.6.32-573.60.1.el6.
- Update redhat perf-debuginfo to version 0:2.6.32-573.60.1.el6.
- Update redhat python-perf to version 0:2.6.32-573.60.1.el6.
- Update redhat python-perf-debuginfo to version 0:2.6.32-573.60.1.el6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-abi-whitelists |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-bootwrapper |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-debug |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-debug-debuginfo |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-debug-devel |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-debuginfo |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-debuginfo-common-i686 |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-debuginfo-common-ppc64 |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-debuginfo-common-s390x |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-debuginfo-common-x86_64 |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-devel |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-doc |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-firmware |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-headers |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-kdump |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-kdump-debuginfo |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | kernel-kdump-devel |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | perf |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | perf-debuginfo |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | python-perf |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::computenode | redhat | python-perf-debuginfo |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-abi-whitelists |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-bootwrapper |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-debug |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-debug-debuginfo |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-debug-devel |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-debuginfo |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-debuginfo-common-i686 |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-debuginfo-common-ppc64 |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-debuginfo-common-s390x |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-debuginfo-common-x86_64 |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-devel |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-doc |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-firmware |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-headers |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-kdump |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-kdump-debuginfo |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | kernel-kdump-devel |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | perf |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | perf-debuginfo |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | python-perf |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
| Red Hat:rhel_eus:6.7::server | redhat | python-perf-debuginfo |
< 0:2.6.32-573.60.1.el6 Fix: upgrade to 0:2.6.32-573.60.1.el6
|
Original advisory text
Red Hat Security Advisory: kernel security and bug fix update
References
- https://access.redhat.com/errata/RHSA-2018:2250 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://access.redhat.com/security/vulnerabilities/ssbd Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1566890 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2250.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2018-3639 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2018-3639 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2018-3639 Vendor Advisory
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1528 Third Party Advisory
- https://software.intel.com/sites/default/files/managed/b9/f9/336983-Intel-Analys... Third Party Advisory
- https://software.intel.com/sites/default/files/managed/c5/63/336996-Speculative-... Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.... Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published29 Sep 2024
Updated30 May 2026
First seen30 May 2026
Sources
RHSA-2018:2250 · OSV
Track software like this
Free during beta