MGASA-2018-0374

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2018-0374.html
Import Source
https://advisories.mageia.org/MGASA-2018-0374.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2018-0374
Upstream
Published
2018-09-14T20:41:44Z
Modified
2026-04-16T01:47:07Z
Summary
Updated kernel-tmb packages fix security vulnerabilities
Details

This kernel-tmb update is based on the upstream 4.14.69 and adds additional fixes for the L1TF and Spectre security issues. It also fixes at least the following security issues:

Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket (CVE-2018-6554).

The irda_setsockopt function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (ias_object use-after-free and system crash) or possibly have unspecified other impact via an AF_IRDA socket (CVE-2018-6555).

Other fixes in this update:

  • WireGuard has been updated to 0.0.20180904
  • all SPI_INTEL_SPI config options have been disable to prevent a potential bios corrupting bug (mga#23560)

For other changes in this update, see the referenced changelogs.

References
Credits

Affected packages

Mageia:6 / kernel-tmb

Package

Name
kernel-tmb
Purl
pkg:rpm/mageia/kernel-tmb?arch=source&distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14.69-1.mga6

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2018-0374.json"