Red Hat Security AdvisoryRHSA-2019:3967
kernel security and bug fix update
Released 2019-11-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) kernel-3.10.0-862.44.2.el7, kernel-abi-whitelists-3.10.0-862.44.2.el7, kernel-debug-3.10.0-862.44.2.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) kernel-tools-libs-devel-3.10.0-862.44.2.el7
- Red Hat Enterprise Linux Server EUS (v. 7.5) kernel-3.10.0-862.44.2.el7, kernel-abi-whitelists-3.10.0-862.44.2.el7, kernel-bootwrapper-3.10.0-862.44.2.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.5) kernel-debug-devel-3.10.0-862.44.2.el7, kernel-tools-libs-devel-3.10.0-862.44.2.el7
Fixes 8 records
Priority MEDIUM 52
In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.16523 · Published 2019-02-15 · Fixed CWE-362
Priority MEDIUM 41
An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx().
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.04345 · Published 2019-04-25 · Fixed CWE-835
Priority MEDIUM 40
In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt and bind on an AF_PACKET socket.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.02612 · Published 2018-10-22 · Fixed CWE-362
Priority LOW 36
The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00805 · Published 2019-03-17 · Fixed CWE-416
Priority LOW 35
It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_ra…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00523 · Published 2018-08-21 · Partial fix · 3.16.58, 3.18.117 +5 CWE-416
Priority LOW 35
In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00759 · Published 2018-12-06 · Partial fix CWE-704
Priority LOW 26
The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secre…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00774 · Published 2019-01-07 · Fixed CWE-319
Priority LOW 25
The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00466 · Published 2018-03-01 · Fixed CWE-835
THREATIST.IORead the docs