Red Hat Security AdvisoryRHSA-2019:2900
kernel security and bug fix update
Released 2019-09-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.3) kernel-3.10.0-514.69.1.el7, kernel-abi-whitelists-3.10.0-514.69.1.el7, kernel-debug-3.10.0-514.69.1.el7 +7
- Red Hat Enterprise Linux Server E4S (v. 7.3) kernel-3.10.0-514.69.1.el7, kernel-abi-whitelists-3.10.0-514.69.1.el7, kernel-bootwrapper-3.10.0-514.69.1.el7 +8
- Red Hat Enterprise Linux Server Optional AUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.69.1.el7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.3) kernel-debug-devel-3.10.0-514.69.1.el7, kernel-tools-libs-devel-3.10.0-514.69.1.el7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.69.1.el7
- Red Hat Enterprise Linux Server TUS (v. 7.3) kernel-3.10.0-514.69.1.el7, kernel-abi-whitelists-3.10.0-514.69.1.el7, kernel-debug-3.10.0-514.69.1.el7 +7
Fixes 2 records
Priority LOW 35
A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00622 · Published 2019-09-17 · Fixed CWE-120
Priority LOW 33
An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory.
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.04521 · Published 2019-09-03 · Partial fix · publication
