Red Hat Security Advisory: kernel-rt security update
An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-1000199US | medium5.5 | Exploit | ||
The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear… | ||||
| CVE-2018-8897US | high7.8 | Exploit | ||
A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-sys… | ||||
references
External citations — patches, advisories, analysis.
remediations (48)
- Fixedkernel-rt-1:3.10.0-693.25.4.rt56.613.el6rt.src as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-1:3.10.0-693.25.4.rt56.613.el6rt.src as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-debug-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-debug-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-debug-debuginfo-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-debug-debuginfo-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-debug-devel-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-debug-devel-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-debuginfo-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-debuginfo-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-debuginfo-common-x86_64-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-debuginfo-common-x86_64-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-devel-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-devel-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-doc-1:3.10.0-693.25.4.rt56.613.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-doc-1:3.10.0-693.25.4.rt56.613.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-firmware-1:3.10.0-693.25.4.rt56.613.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-firmware-1:3.10.0-693.25.4.rt56.613.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-trace-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-trace-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-trace-debuginfo-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-trace-debuginfo-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-trace-devel-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-trace-devel-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-vanilla-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-vanilla-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-vanilla-debuginfo-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-vanilla-debuginfo-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-vanilla-devel-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Fixedkernel-rt-vanilla-devel-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:1354 - Workaroundkernel-rt-1:3.10.0-693.25.4.rt56.613.el6rt.src as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
- Workaroundkernel-rt-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
- Workaroundkernel-rt-debug-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
- Workaroundkernel-rt-debug-debuginfo-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
- Workaroundkernel-rt-debug-devel-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
- Workaroundkernel-rt-debuginfo-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
- Workaroundkernel-rt-debuginfo-common-x86_64-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
- Workaroundkernel-rt-devel-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
- Workaroundkernel-rt-doc-1:3.10.0-693.25.4.rt56.613.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
- Workaroundkernel-rt-firmware-1:3.10.0-693.25.4.rt56.613.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
- Workaroundkernel-rt-trace-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
- Workaroundkernel-rt-trace-debuginfo-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
- Workaroundkernel-rt-trace-devel-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
- Workaroundkernel-rt-vanilla-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
- Workaroundkernel-rt-vanilla-debuginfo-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
- Workaroundkernel-rt-vanilla-devel-1:3.10.0-693.25.4.rt56.613.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
To mitigate this issue: 1) Save the following script in a 'CVE-2018-1000199.stp' file. --- probe kernel.function("ptrace_set_debugreg") { if ($n < 4) $n = 4; /* set invalid debug register #, returns -EIO */ } probe begin { printk(0, "CVE-2018-1000199 mitigation loaded") } probe end { printk(0, "CVE-2018-1000199 mitigation unloaded") } --- 2) Install systemtap package and its dependencies # yum install -y systemtap systemtap-runtime # yum install -y kernel-devel kernel-debuginfo kernel-debuginfo-common 3) Build the mitigation kernel module as root. # stap -r `uname -r` -m cve_2018_1000199.ko -g CVE-2018-1000199.stp -p4 4) Load the mitigation module as root # staprun -L cve_2018_1000199.ko
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan