Red Hat Security Advisory

RHSA-2019:3836

kernel security and bug fix update

Released 2019-11-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-754.24.2.el6, kernel-abi-whitelists-2.6.32-754.24.2.el6, kernel-debug-2.6.32-754.24.2.el6 +5
Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-754.24.2.el6
Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-754.24.2.el6, kernel-abi-whitelists-2.6.32-754.24.2.el6, kernel-debug-2.6.32-754.24.2.el6 +5
Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-754.24.2.el6
Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-754.24.2.el6, kernel-abi-whitelists-2.6.32-754.24.2.el6, kernel-bootwrapper-2.6.32-754.24.2.el6 +8
Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-754.24.2.el6
Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-754.24.2.el6, kernel-abi-whitelists-2.6.32-754.24.2.el6, kernel-debug-2.6.32-754.24.2.el6 +5
Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-754.24.2.el6

Fixes 4 records

TI-2019-02908 CVE-2019-3900 · GHSA-h25g-v6rp-rj4h

Infinite loop in Red Hat Kernel

MEDIUM 41

An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx().

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.04345 Published 2019-04-25 Fixed CWE-835

TI-2019-08333 CVE-2019-11135 · GHSA-qfxp-65r3-gfv7

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow…

LOW 34

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.03133 Published 2019-11-14 Partial fix

TI-2018-08751 CVE-2018-12207 · GHSA-mgp4-7j8w-x48q

Improper input validation in 2019.2 IPU – Intel Processor Machine Check Error

LOW 31

Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local acces…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00915 Published 2019-11-14 Partial fix CWE-20

TI-2019-00134 CVE-2019-0154 · GHSA-wxww-q7fc-j26f

Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th…

LOW 26

Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Cel…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00646 Published 2019-11-14 Partial fix