Red Hat Security Advisory

RHSA-2019:3220

kernel security and bug fix update

Released 2019-10-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) bpftool-3.10.0-957.38.1.el7, kernel-3.10.0-957.38.1.el7, kernel-abi-whitelists-3.10.0-957.38.1.el7 +8
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.38.1.el7
Red Hat Enterprise Linux Server EUS (v. 7.6) bpftool-3.10.0-957.38.1.el7, kernel-3.10.0-957.38.1.el7, kernel-abi-whitelists-3.10.0-957.38.1.el7 +11
Red Hat Enterprise Linux Server Optional EUS (v. 7.6) kernel-debug-devel-3.10.0-957.38.1.el7, kernel-tools-libs-devel-3.10.0-957.38.1.el7
Red Hat Virtualization 4.2 Hypervisor for RHEL 7.6 EUS kernel-devel-3.10.0-957.38.1.el7, perf-3.10.0-957.38.1.el7, python-perf-3.10.0-957.38.1.el7

Fixes 3 records

TI-2019-02908 CVE-2019-3900 · GHSA-h25g-v6rp-rj4h

Infinite loop in Red Hat Kernel

MEDIUM 41

An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx().

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.04345 Published 2019-04-25 Fixed CWE-835

TI-2019-06941 CVE-2019-9506 · GHSA-5xj4-2499-67mw

Cryptographic flaw in Bluetooth BR/EDR

MEDIUM 40

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.02691 Published 2019-08-14 Partial fix CWE-310

TI-2019-00853 CVE-2019-1125 · GHSA-r79p-pw9q-gxrc

Windows Kernel Information Disclosure Vulnerability

LOW 33

An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.04521 Published 2019-09-03 Partial fix · publication