Red Hat Security AdvisoryRHSA-2019:1167
kernel security and bug fix update
Released 2019-05-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-80.1.2.el8_0
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-80.1.2.el8_0, kernel-4.18.0-80.1.2.el8_0, kernel-abi-whitelists-4.18.0-80.1.2.el8_0 +19
Fixes 5 records
Priority MEDIUM 40
In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a "service ipmievd re…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0475 · Published 2019-02-22 · Partial fix CWE-416
Priority LOW 30
Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel w…
CVSS 3.1MEDIUM 5.9· Local · No auth · No interaction · EPSS 0.01553 · Published 2019-05-30 · Partial fix CWE-200
Priority LOW 28
Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with…
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.01497 · Published 2019-05-30 · Partial fix CWE-200
Priority LOW 28
Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel…
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.0151 · Published 2019-05-30 · Partial fix CWE-200
Priority LOW 26
Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a s…
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.00607 · Published 2019-05-30 · Partial fix