RHEL 6 & CentOS 6 receive update for fixing Spectre Variant 4 and other vulnerabilities
Red Hat Enterprise Linux (RHEL) 6 and CentOS Linux 6 series recently received kernel security updates that fix vulnerabilities that were recently exposed. Now that the RHEL 7 and CentOS 7 series have fixed the Spectre Variant 4 (CVE-2018-3639) security vulnerability and the Lazy FPU State Save/Restore CPU vulnerability, it is now finally RHEL 6 and CentOS 6. Users can install these patches on the computers they use.
Also included in this round of kernel security updates is the Lazy FPU State Save/Restore CPU Vulnerability (CVE-2018-3665), which can cause FPU status information to leak. In addition, the new kernel update resolves a vulnerability in the mm/mempolicy.c:do_get_mempolicy function (CVE-2018-10675) that can initiate a local service denial of attack.