Red Hat Security AdvisoryRHSA-2019:0833
kernel-rt security and bug fix update
Released 2019-04-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Realtime (v. 7) kernel-rt-3.10.0-957.12.1.rt56.927.el7, kernel-rt-debug-3.10.0-957.12.1.rt56.927.el7, kernel-rt-debug-devel-3.10.0-957.12.1.rt56.927.el7 +4
- Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-957.12.1.rt56.927.el7, kernel-rt-debug-3.10.0-957.12.1.rt56.927.el7, kernel-rt-debug-devel-3.10.0-957.12.1.rt56.927.el7 +7
Fixes 2 records
Priority MEDIUM 52
In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.16523 · Published 2019-02-15 · Fixed CWE-362
Priority LOW 36
The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00805 · Published 2019-03-17 · Fixed CWE-416
