Red Hat Security AdvisoryRHSA-2019:4058
kernel security and bug fix update
Released 2019-12-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.4) kernel-3.10.0-693.61.1.el7, kernel-abi-whitelists-3.10.0-693.61.1.el7, kernel-debug-3.10.0-693.61.1.el7 +8
- Red Hat Enterprise Linux Server E4S (v. 7.4) kernel-3.10.0-693.61.1.el7, kernel-abi-whitelists-3.10.0-693.61.1.el7, kernel-bootwrapper-3.10.0-693.61.1.el7 +9
- Red Hat Enterprise Linux Server Optional AUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.61.1.el7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.4) kernel-debug-devel-3.10.0-693.61.1.el7, kernel-tools-libs-devel-3.10.0-693.61.1.el7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.61.1.el7
- Red Hat Enterprise Linux Server TUS (v. 7.4) kernel-3.10.0-693.61.1.el7, kernel-abi-whitelists-3.10.0-693.61.1.el7, kernel-debug-3.10.0-693.61.1.el7 +8
Fixes 6 records
Priority MEDIUM 46
Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that le…
CVSS 3.1HIGH 7.0· Local · No auth · User interaction · EPSS 0.13484 · Published 2017-08-19 · Partial fix CWE-416
Priority MEDIUM 41
An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx().
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.04345 · Published 2019-04-25 · Fixed CWE-835
Priority LOW 36
The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00805 · Published 2019-03-17 · Fixed CWE-416
Priority LOW 31
An issue was discovered in the Linux kernel before 5.0.4.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00451 · Published 2019-05-07 · Fixed CWE-416
Priority LOW 26
The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secre…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00774 · Published 2019-01-07 · Fixed CWE-319
Priority LOW 25
The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00466 · Published 2018-03-01 · Fixed CWE-835
THREATIST.IORead the docs