Kernel security update: CVE-2018-5803; Virtuozzo ReadyKernel patch 52.0 for Virtuozzo 7.0.6 HF3, 7.0.7, and 7.0.7 HF2¶

1. Overview¶

The cumulative Virtuozzo ReadyKernel patch was updated with security and stability fixes. The patch applies to Virtuozzo 7.0 kernels 3.10.0-693.11.6.vz7.40.4 (7.0.6 HF3), 3.10.0-693.17.1.vz7.43.10 (7.0.7), 3.10.0-693.21.1.vz7.46.7 (7.0.7 HF2).

2. Security Fixes¶

• [Moderate] It was found that _sctp_make_chunk() function did not check if the chunk length for INIT and INIT_ACK packets was within the allowed limits. A local attacker could exploit this to trigger a kernel crash. (CVE-2018-5803)

3. Bug Fixes¶

• Potential kernel crash in tcache_detach_page(). (PSBM-81731)

4. Installing the Update¶

Download, install, and instantly apply the patch to the current kernel by running ‘readykernel update’.

5. References¶

• https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-40.4-52.0-2.vl7/

• https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-43.10-52.0-2.vl7/

• https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-46.7-52.0-2.vl7/

• https://access.redhat.com/security/cve/cve-2018-5803

The JSON file with the list of new and updated packages is available at http://docs.virtuozzo.com/vza/VZA-2018-036.json.