Red Hat Security AdvisoryRHSA-2019:4164
kernel security and bug fix update
Released 2019-12-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.2) kernel-3.10.0-327.83.1.el7, kernel-abi-whitelists-3.10.0-327.83.1.el7, kernel-debug-3.10.0-327.83.1.el7 +8
- Red Hat Enterprise Linux Server E4S (v. 7.2) kernel-3.10.0-327.83.1.el7, kernel-abi-whitelists-3.10.0-327.83.1.el7, kernel-debug-3.10.0-327.83.1.el7 +8
- Red Hat Enterprise Linux Server Optional AUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.83.1.el7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.2) kernel-tools-libs-devel-3.10.0-327.83.1.el7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.83.1.el7
- Red Hat Enterprise Linux Server TUS (v. 7.2) kernel-3.10.0-327.83.1.el7, kernel-abi-whitelists-3.10.0-327.83.1.el7, kernel-debug-3.10.0-327.83.1.el7 +8
Fixes 3 records
Priority LOW 36
The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writab…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01036 · Published 2018-07-06 · Partial fix CWE-269
Priority LOW 35
In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00759 · Published 2018-12-06 · Partial fix CWE-704
Priority LOW 26
The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secre…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00774 · Published 2019-01-07 · Fixed CWE-319
