CentOS 7 kernel Security Update: fixed five Vulnerabilities

CentOS 7 kernel Security Update: fixed five Vulnerabilities
CentOS System Maintenance Engineer Johnny Hughes released a Security Bulletin today, requesting users using CentOS 7 series to deploy important kernel security updates as soon as possible. According to Red Hat's upsteam Security Bulletin, this kernel update fixes a total of five Security Vulnerabilities and fixes many other bugs.

This kernel update fixes (CVE-2017-7477) and (CVE-2017-7645) remote code execution vulnerabilities, the former in socket buffer (skb_buff) from fragment list (skb_shinfo (skb)-> frag_list) create a scattergather list to allocate heap memory, allowing attackers to continuously escalate permissions. The latter affects the NFS2/3 RPC client to send long data to the NFS server, thus allowing remote attackers to crash the kernel.

(CVE-2017-7895) fixes security vulnerabilities discovered by NFSv2 and NFSv3 servers; (CVE-2017-2583) fixes Kernel-based virtual machines (CONFIG_KVM) Vulnerabilities (CVE-2017-6214) the security vulnerability exists when Linux Kernel processes URG flag.

CentOS users must deploy kernel-3.10.0-514.26.1.el7 Kernel updates as soon as possible and have confirmed Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux Workstation 7, Red Hat Enterprise Linux Server 7, red Hat Enterprise Linux HPC Node 7 and Red Hat Enterprise Linux Server TUS 7.3 versions have this vulnerability.