Red Hat Security AdvisoryRHSA-2019:3217
kernel-alt security and bug fix update
Released 2019-10-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) kernel-4.14.0-115.14.1.el7a, kernel-abi-whitelists-4.14.0-115.14.1.el7a, kernel-alt-4.14.0-115.14.1.el7a +8
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kernel-debug-devel-4.14.0-115.14.1.el7a, kernel-tools-libs-devel-4.14.0-115.14.1.el7a
Fixes 5 records
Priority MEDIUM 43
The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow.
CVSS 3.1HIGH 8.3· Adjacent network · No auth · No interaction · EPSS 0.03853 · Published 2020-01-16 · Partial fix CWE-122
Priority MEDIUM 42
An issue was discovered in the Linux kernel before 5.0.7.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05789 · Published 2019-05-07 · Partial fix CWE-416
Priority MEDIUM 40
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.
CVSS 3.1HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.02691 · Published 2019-08-14 · Partial fix CWE-310
Priority LOW 35
An issue was discovered in the Linux kernel before 4.18.7.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00707 · Published 2019-07-26 · Fixed CWE-416
Priority LOW 35
It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_ra…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00523 · Published 2018-08-21 · Partial fix · 3.16.58, 3.18.117 +5 CWE-416
THREATIST.IORead the docs