Red Hat Security AdvisoryRHSA-2019:0163
kernel security, bug fix, and enhancement update
Released 2019-01-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-957.5.1.el7, kernel-3.10.0-957.5.1.el7, kernel-abi-whitelists-3.10.0-957.5.1.el7 +9
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.5.1.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) bpftool-3.10.0-957.5.1.el7, kernel-3.10.0-957.5.1.el7, kernel-abi-whitelists-3.10.0-957.5.1.el7 +9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.5.1.el7
- Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-957.5.1.el7, kernel-3.10.0-957.5.1.el7, kernel-abi-whitelists-3.10.0-957.5.1.el7 +12
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-957.5.1.el7, kernel-tools-libs-devel-3.10.0-957.5.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-957.5.1.el7, kernel-3.10.0-957.5.1.el7, kernel-abi-whitelists-3.10.0-957.5.1.el7 +9
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.5.1.el7
Fixes 2 records
Priority MEDIUM 40
In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt and bind on an AF_PACKET socket.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.02612 · Published 2018-10-22 · Fixed CWE-362
Priority LOW 25
The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file (if the user ha…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0051 · Published 2018-12-12 · Fixed CWE-863
