Red Hat Security AdvisoryRHSA-2019:2696
kernel security and bug fix update
Released 2019-09-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.4) kernel-3.10.0-693.58.1.el7, kernel-abi-whitelists-3.10.0-693.58.1.el7, kernel-debug-3.10.0-693.58.1.el7 +7
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.58.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.4) kernel-3.10.0-693.58.1.el7, kernel-abi-whitelists-3.10.0-693.58.1.el7, kernel-bootwrapper-3.10.0-693.58.1.el7 +10
- Red Hat Enterprise Linux Server Optional EUS (v. 7.4) kernel-debug-devel-3.10.0-693.58.1.el7, kernel-tools-libs-devel-3.10.0-693.58.1.el7
Fixes 5 records
Priority LOW 38
A flaw was found in the Linux kernel's NFS41+ subsystem.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.01455 · Published 2018-12-18 · Fixed CWE-416
Priority LOW 38
A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02704 · Published 2019-07-30 · Fixed CWE-476
Priority LOW 36
The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writab…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01036 · Published 2018-07-06 · Partial fix CWE-269
Priority LOW 35
In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00759 · Published 2018-12-06 · Partial fix CWE-704
Priority LOW 33
An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory.
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.04521 · Published 2019-09-03 · Partial fix · publication