Red Hat Security AdvisoryRHSA-2019:1946
kernel security, bug fix, and enhancement update
Released 2019-07-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.4) kernel-3.10.0-693.55.1.el7, kernel-abi-whitelists-3.10.0-693.55.1.el7, kernel-debug-3.10.0-693.55.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.55.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.4) kernel-3.10.0-693.55.1.el7, kernel-abi-whitelists-3.10.0-693.55.1.el7, kernel-bootwrapper-3.10.0-693.55.1.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.4) kernel-debug-devel-3.10.0-693.55.1.el7, kernel-tools-libs-devel-3.10.0-693.55.1.el7
Fixes 5 records
Priority MEDIUM 42
A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is processed.
CVSS 3.1HIGH 7.0· Network · No auth · No interaction · EPSS 0.08743 · Published 2018-09-25 · Partial fix CWE-121
Priority LOW 36
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel…
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.08625 · Published 2018-07-10 · Partial fix
Priority LOW 32
The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load exiting" and "CR8-store exiting" L0 vmcs02 controls exist in cases where L1 omits the "use TPR shado…
CVSS 3.0HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00512 · Published 2017-09-26 · Fixed
Priority LOW 25
security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer derefe…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00452 · Published 2017-10-12 · Partial fix CWE-476
Priority LOW 22
A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11.
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00357 · Published 2018-01-09 · Partial fix CWE-362
THREATIST.IORead the docs