TI-2017-14449 CVE-2017-1000112 · GHSA-r7cm-47vv-77vj
Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch.
Priority MEDIUM 50
Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch.
RHSA-2019:4159
kernel security and bug fix update
Released 2019-12-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.3) kernel-3.10.0-514.71.1.el7, kernel-abi-whitelists-3.10.0-514.71.1.el7, kernel-debug-3.10.0-514.71.1.el7 +8
- Red Hat Enterprise Linux Server E4S (v. 7.3) kernel-3.10.0-514.71.1.el7, kernel-abi-whitelists-3.10.0-514.71.1.el7, kernel-bootwrapper-3.10.0-514.71.1.el7 +9
- Red Hat Enterprise Linux Server Optional AUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.71.1.el7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.3) kernel-debug-devel-3.10.0-514.71.1.el7, kernel-tools-libs-devel-3.10.0-514.71.1.el7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.71.1.el7
- Red Hat Enterprise Linux Server TUS (v. 7.3) kernel-3.10.0-514.71.1.el7, kernel-abi-whitelists-3.10.0-514.71.1.el7, kernel-debug-3.10.0-514.71.1.el7 +8
Fixes 7 records
TI-2018-13124 CVE-2018-18559 · GHSA-8w88-57v8-p48h
In the Linux kernel through 4.19, a use-after-free can occur due to a race condition…
Priority MEDIUM 40
In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt and bind on an AF_PACKET socket.
TI-2017-04880 CVE-2017-7184 · GHSA-hxjx-r7gc-4xhx
The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through…
Priority LOW 38
The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, which allows local users to obtain root privileges or cau…
TI-2018-09642 CVE-2018-13405 · GHSA-5p56-pcgw-42mf
The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local…
Priority LOW 36
The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writab…
TI-2018-06977 CVE-2018-9568 · GHSA-8hfc-fgjc-59xp
Incorrect type conversion in Google Android
Priority LOW 35
In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion.
TI-2018-00988 CVE-2018-1068 · GHSA-xfrv-5h7j-4qvx
Memory corruption in Linux Kernel
Priority LOW 30
A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging.
TI-2019-03897 CVE-2019-5489 · GHSA-384f-f7vj-vfh4
The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed…
Priority LOW 26
The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secre…