Red Hat Security AdvisoryRHSA-2019:3055
kernel security and bug fix update
Released 2019-10-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1062.4.1.el7, kernel-3.10.0-1062.4.1.el7, kernel-abi-whitelists-3.10.0-1062.4.1.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1062.4.1.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) bpftool-3.10.0-1062.4.1.el7, kernel-3.10.0-1062.4.1.el7, kernel-abi-whitelists-3.10.0-1062.4.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1062.4.1.el7
- Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1062.4.1.el7, kernel-3.10.0-1062.4.1.el7, kernel-abi-whitelists-3.10.0-1062.4.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1062.4.1.el7, kernel-tools-libs-devel-3.10.0-1062.4.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1062.4.1.el7, kernel-3.10.0-1062.4.1.el7, kernel-abi-whitelists-3.10.0-1062.4.1.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1062.4.1.el7
Fixes 4 records
Priority MEDIUM 52
A flaw was found in the Linux kernel.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06821 · Published 2019-06-14 · Partial fix CWE-122
Priority MEDIUM 47
A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.05877 · Published 2019-06-03 · Partial fix CWE-122
Priority MEDIUM 40
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.
CVSS 3.1HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.02691 · Published 2019-08-14 · Partial fix CWE-310
Priority LOW 35
An issue was discovered in the Linux kernel before 4.18.7.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00707 · Published 2019-07-26 · Fixed CWE-416