Red Hat Security AdvisoryRHSA-2019:2473
kernel security and bug fix update
Released 2019-08-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-754.18.2.el6, kernel-abi-whitelists-2.6.32-754.18.2.el6, kernel-debug-2.6.32-754.18.2.el6 +5
- Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-754.18.2.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-754.18.2.el6, kernel-abi-whitelists-2.6.32-754.18.2.el6, kernel-debug-2.6.32-754.18.2.el6 +5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-754.18.2.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-754.18.2.el6, kernel-abi-whitelists-2.6.32-754.18.2.el6, kernel-bootwrapper-2.6.32-754.18.2.el6 +8
- Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-754.18.2.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-754.18.2.el6, kernel-abi-whitelists-2.6.32-754.18.2.el6, kernel-debug-2.6.32-754.18.2.el6 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-754.18.2.el6
Fixes 4 records
Priority LOW 34
The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER)…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00441 · Published 2017-12-20 · Partial fix CWE-20
Priority LOW 33
An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory.
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.04521 · Published 2019-09-03 · Partial fix · publication
Priority LOW 26
The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secre…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00774 · Published 2019-01-07 · Fixed CWE-319
Priority LOW 25
An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00364 · Published 2018-10-03 · Partial fix CWE-362
THREATIST.IORead the docs