Red Hat Security Advisory

RHSA-2019:1873

kernel security, bug fix, and enhancement update

Released 2019-07-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-957.27.2.el7, kernel-3.10.0-957.27.2.el7, kernel-abi-whitelists-3.10.0-957.27.2.el7 +9
Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.27.2.el7
Red Hat Enterprise Linux ComputeNode (v. 7) bpftool-3.10.0-957.27.2.el7, kernel-3.10.0-957.27.2.el7, kernel-abi-whitelists-3.10.0-957.27.2.el7 +9
Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.27.2.el7
Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-957.27.2.el7, kernel-3.10.0-957.27.2.el7, kernel-abi-whitelists-3.10.0-957.27.2.el7 +12
Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-957.27.2.el7, kernel-tools-libs-devel-3.10.0-957.27.2.el7
Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-957.27.2.el7, kernel-3.10.0-957.27.2.el7, kernel-abi-whitelists-3.10.0-957.27.2.el7 +9
Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.27.2.el7

Fixes 4 records

TI-2018-12094 CVE-2018-16884 · GHSA-cxqg-5c27-qx45

Use after free in [UNKNOWN] kernel:

LOW 38

A flaw was found in the Linux kernel's NFS41+ subsystem.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01455 Published 2018-12-18 Fixed CWE-416

TI-2018-12081 CVE-2018-16871 · GHSA-h4fx-7429-jvf7

NULL pointer dereference in Red Hat kernel:

LOW 38

A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02704 Published 2019-07-30 Fixed CWE-476

TI-2019-08290 CVE-2019-11085 · GHSA-2wcq-j266-p9cq

Improper input validation in Intel i915 Graphics for Linux

LOW 35

Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00475 Published 2019-05-17 Partial fix · 5.0. CWE-20

TI-2019-08849 CVE-2019-11811 · GHSA-62x2-7ppm-gf38

An issue was discovered in the Linux kernel before 5.0.4.

LOW 31

An issue was discovered in the Linux kernel before 5.0.4.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00451 Published 2019-05-07 Fixed CWE-416