CVE-2018-14633
High · 7.0CVSS
7.0
EPSS
8.7%
Published
Sep 25, 2018
CISA due date
—
Cloudanix analysis
Schedule a fix
SSVC: Track
A problem in the way some storage login requests are handled could let an outsider crash the system or, in rare situations, reach stored data.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- High
- Impact
- Denial Of Service
- Component
- OS kernel
- Class
- Buffer Overflow
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Medium
What it actually does
Unauthenticated remote attacker triggers stack buffer overflow smashing up to 17 bytes inside chap_server_compute_md5() when the Linux kernel processes an iSCSI CHAP authentication request; impact depends on build flags and architecture and may produce denial of service or limited unauthorized data access.
Why it matters to the business
Systems exposing iSCSI targets risk service outages and, in rare cases, exposure of exported storage; the issue remains relevant for any unpatched kernels still in use years after disclosure.
How an attack unfolds
An attacker with network reachability to an enabled iSCSI target sends a specially crafted CHAP authentication request that overflows the stack buffer during MD5 computation; the resulting corruption may crash the target or, depending on memory layout, permit limited unauthorized access.
How to fix it
Upgrade affected kernels to non-vulnerable releases; for xen (Alpine:v3.10) apply version 4.12.0-r2 or later. Disable the iSCSI target service when it is not required.
How to confirm the fix worked
Confirm kernel package version meets or exceeds the listed fixed release; verify iSCSI target is either disabled or built from patched source; perform connectivity and authentication tests against the target.
Typical attack path
- Identify hosts with iSCSI target service listening
- Send crafted CHAP authentication packet to chap_server_compute_md5()
- Trigger stack corruption and observe resulting crash or access behavior
How to detect it
Review system logs and kernel crash dumps for oops or panic entries originating from iSCSI target code around the time of unexpected service restarts; correlate with network flows to the iSCSI port.
What your security team should do
- Apply the listed kernel updates or disable iSCSI targets within the next maintenance window
- Review network exposure of any iSCSI services and restrict access to trusted initiators only
- Add iSCSI target availability to monitoring and alert on unexpected restarts
The record
A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is processed. An unauthenticated remote attacker can cause a stack buffer overflow and smash up to 17 bytes of the stack. The attack requires the iSCSI target to be enabled on the victim host. Depending on how the target's code was built (i.e. depending on a compiler, compile flags and hardware architecture) an attack may lead to a system crash and thus to a denial-of-service or possibly to a non-authorized access to data exported by an iSCSI target. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is highly unlikely. Kernel versions 4.18.x, 4.14.x and 3.10.x are believed to be vulnerable.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | linux | 0 | 4.18.10-1 |
| Debian:12 | linux | 0 | 4.18.10-1 |
| Debian:13 | linux | 0 | 4.18.10-1 |
| Debian:8 | linux | 0 | 3.16.59-1 |
| Debian:8 | linux-4.9 | 0 | 4.9.110-3+deb9u5~deb8u1 |
| Debian:9 | linux | 0 | 4.9.110-3+deb9u5 |
| Mageia:6 | kernel | 0 | 4.14.78-1.mga6 |
| Mageia:6 | kernel-linus | 0 | 4.14.78-1.mga6 |
| Mageia:6 | kernel-tmb | 0 | 4.14.78-1.mga6 |
| Mageia:6 | kernel-userspace-headers | 0 | 4.14.78-1.mga6 |
| Mageia:6 | kmod-vboxadditions | 0 | 5.2.18-10.mga6 |
| Mageia:6 | kmod-virtualbox | 0 | 5.2.18-10.mga6 |
| Mageia:6 | kmod-xtables-addons | 0 | 2.13-70.mga6 |
| Mageia:6 | wireguard-tools | 0 | 0.0.20181018-1.mga6 |
| Red Hat:enterprise_linux:7::client | bpftool | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-abi-whitelists | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-bootwrapper | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-debug | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-debug-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-debug-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-debuginfo-common-ppc64 | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-debuginfo-common-ppc64le | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-debuginfo-common-s390x | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-debuginfo-common-x86_64 | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-doc | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-headers | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-kdump | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-kdump-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-kdump-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-tools | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-tools-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-tools-libs | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | kernel-tools-libs-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | perf | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | perf-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | python-perf | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::client | python-perf-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | bpftool | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-abi-whitelists | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-bootwrapper | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-debug | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-debug-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-debug-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-debuginfo-common-ppc64 | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-debuginfo-common-ppc64le | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-debuginfo-common-s390x | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-debuginfo-common-x86_64 | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-doc | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-headers | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-kdump | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-kdump-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-kdump-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-tools | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-tools-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-tools-libs | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | kernel-tools-libs-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | perf | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | perf-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | python-perf | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::computenode | python-perf-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | bpftool | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-abi-whitelists | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-bootwrapper | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-debug | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-debug-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-debug-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-debuginfo-common-ppc64 | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-debuginfo-common-ppc64le | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-debuginfo-common-s390x | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-debuginfo-common-x86_64 | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-doc | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-headers | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-kdump | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-kdump-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-kdump-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-tools | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-tools-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-tools-libs | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | kernel-tools-libs-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | perf | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | perf-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | python-perf | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::server | python-perf-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | bpftool | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-abi-whitelists | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-bootwrapper | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-debug | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-debug-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-debug-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-debuginfo-common-ppc64 | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-debuginfo-common-ppc64le | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-debuginfo-common-s390x | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-debuginfo-common-x86_64 | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-doc | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-headers | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-kdump | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-kdump-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-kdump-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-tools | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-tools-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-tools-libs | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | kernel-tools-libs-devel | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | perf | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | perf-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | python-perf | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:enterprise_linux:7::workstation | python-perf-debuginfo | 0 | 0:3.10.0-957.1.3.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-abi-whitelists | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-bootwrapper | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-debug | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-debug-debuginfo | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-debug-devel | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-debuginfo | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-debuginfo-common-ppc64 | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-debuginfo-common-ppc64le | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-debuginfo-common-s390x | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-debuginfo-common-x86_64 | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-devel | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-doc | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-headers | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-kdump | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-kdump-debuginfo | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-kdump-devel | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-tools | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-tools-debuginfo | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-tools-libs | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | kernel-tools-libs-devel | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | perf | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | perf-debuginfo | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | python-perf | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::computenode | python-perf-debuginfo | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-abi-whitelists | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-bootwrapper | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-debug | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-debug-debuginfo | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-debug-devel | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-debuginfo | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-debuginfo-common-ppc64 | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-debuginfo-common-ppc64le | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-debuginfo-common-s390x | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-debuginfo-common-x86_64 | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-devel | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-doc | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-headers | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-kdump | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-kdump-debuginfo | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-kdump-devel | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-tools | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-tools-debuginfo | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-tools-libs | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | kernel-tools-libs-devel | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | perf | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | perf-debuginfo | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | python-perf | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_eus:7.4::server | python-perf-debuginfo | 0 | 0:3.10.0-693.55.1.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-debug | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-debug-debuginfo | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-debug-devel | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-debug-kvm | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-debug-kvm-debuginfo | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-debuginfo | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-debuginfo-common-x86_64 | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-devel | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-doc | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-kvm | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-kvm-debuginfo | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-trace | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-trace-debuginfo | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-trace-devel | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-trace-kvm | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| Red Hat:rhel_extras_rt:7 | kernel-rt-trace-kvm-debuginfo | 0 | 0:3.10.0-957.1.3.rt56.913.el7 |
| SUSE:Enterprise Storage 4 | kernel-default | 0 | 4.4.121-92.104.1 |
| SUSE:Enterprise Storage 4 | kernel-source | 0 | 4.4.121-92.104.1 |
| SUSE:Enterprise Storage 4 | kernel-syms | 0 | 4.4.121-92.104.1 |
| SUSE:Enterprise Storage 4 | kgraft-patch-SLE12-SP2_Update_28 | 0 | 1-3.3.1 |
| SUSE:Linux Enterprise Desktop 12 SP3 | kernel-default | 0 | 4.4.162-94.69.2 |
| SUSE:Linux Enterprise Desktop 12 SP3 | kernel-source | 0 | 4.4.162-94.69.2 |
| SUSE:Linux Enterprise Desktop 12 SP3 | kernel-syms | 0 | 4.4.162-94.69.2 |
| SUSE:Linux Enterprise High Availability Extension 12 SP2 | kernel-default | 0 | 4.4.121-92.104.1 |
| SUSE:Linux Enterprise High Availability Extension 12 SP3 | kernel-default | 0 | 4.4.162-94.69.2 |
| SUSE:Linux Enterprise High Availability Extension 15 | kernel-default | 0 | 4.12.14-25.22.1 |
| SUSE:Linux Enterprise Live Patching 12 SP3 | kgraft-patch-SLE12-SP3_Update_10 | 0 | 7-2.1 |
| SUSE:Linux Enterprise Live Patching 12 SP3 | kgraft-patch-SLE12-SP3_Update_11 | 0 | 7-2.1 |
| SUSE:Linux Enterprise Live Patching 12 SP3 | kgraft-patch-SLE12-SP3_Update_12 | 0 | 5-2.1 |
| SUSE:Linux Enterprise Live Patching 12 SP3 | kgraft-patch-SLE12-SP3_Update_13 | 0 | 5-2.1 |
| SUSE:Linux Enterprise Live Patching 12 SP3 | kgraft-patch-SLE12-SP3_Update_14 | 0 | 4-2.1 |
Related vulnerabilities
- CVE-2025-38562 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix… Also affects linux
- CVE-2025-22037 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2025-21760 In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU… Also affects linux
- CVE-2025-21758 In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: add RCU… Also affects linux
- CVE-2025-21664 In the Linux kernel, the following vulnerability has been resolved: dm thin: make… Also affects linux
- CVE-2024-57946 In the Linux kernel, the following vulnerability has been resolved: virtio-blk: don't… Also affects linux
- CVE-2024-57945 In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix the… Also affects linux