Red Hat Security Advisory

RHSA-2019:2741

kernel-rt security and bug fix update

Released 2019-09-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Real Time (v. 8) kernel-rt-4.18.0-80.11.1.rt9.156.el8_0, kernel-rt-core-4.18.0-80.11.1.rt9.156.el8_0, kernel-rt-debug-4.18.0-80.11.1.rt9.156.el8_0 +7
Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-80.11.1.rt9.156.el8_0, kernel-rt-core-4.18.0-80.11.1.rt9.156.el8_0, kernel-rt-debug-4.18.0-80.11.1.rt9.156.el8_0 +9

Fixes 6 records

TI-2019-02858 CVE-2019-3846 · GHSA-3fcq-fcfj-jgfq

Heap-based buffer overflow in kernel

MEDIUM 47

A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.05877 Published 2019-06-03 Partial fix CWE-122

TI-2019-06936 CVE-2019-9500 · GHSA-6jhq-h73f-x439

Broadcom brcmfmac driver is vulnerable to a heap buffer overflow

MEDIUM 43

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow.

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.03853 Published 2020-01-16 Partial fix CWE-122

TI-2019-06939 CVE-2019-9503 · GHSA-6g85-84jx-q393

Broadcom brcmfmac driver is vulnerable to a frame validation bypass

MEDIUM 42

The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass.

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.03286 Published 2020-01-16 Partial fix CWE-20

TI-2019-08579 CVE-2019-11487 · GHSA-vrxc-79fp-6683

The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with…

LOW 35

The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00708 Published 2019-04-23 Fixed CWE-416

TI-2018-14040 CVE-2018-19824 · GHSA-42gx-v2fc-7h6f

In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the…

LOW 35

In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00564 Published 2018-12-03 Partial fix CWE-416

TI-2019-02897 CVE-2019-3887 · GHSA-j2cm-6mgm-v7v4

Incorrect authorization in backstage Kernel

LOW 25

A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00358 Published 2019-04-09 Fixed CWE-863