Red Hat Security AdvisoryRHSA-2020:0036
kernel security and bug fix update
Released 2020-01-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) kernel-3.10.0-862.46.1.el7, kernel-abi-whitelists-3.10.0-862.46.1.el7, kernel-debug-3.10.0-862.46.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) kernel-tools-libs-devel-3.10.0-862.46.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.5) kernel-3.10.0-862.46.1.el7, kernel-abi-whitelists-3.10.0-862.46.1.el7, kernel-bootwrapper-3.10.0-862.46.1.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.5) kernel-debug-devel-3.10.0-862.46.1.el7, kernel-tools-libs-devel-3.10.0-862.46.1.el7
Fixes 6 records
Priority MEDIUM 46
Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that le…
CVSS 3.1HIGH 7.0· Local · No auth · User interaction · EPSS 0.13484 · Published 2017-08-19 · Partial fix CWE-416
Priority MEDIUM 42
An issue was discovered in the Linux kernel before 5.0.7.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05789 · Published 2019-05-07 · Partial fix CWE-416
Priority LOW 36
Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01104 · Published 2018-10-30 · Fixed CWE-459
Priority LOW 34
A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0047 · Published 2018-09-11 · Fixed CWE-250
Priority LOW 34
Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00427 · Published 2017-11-16 · Partial fix CWE-416
Priority LOW 31
An issue was discovered in the Linux kernel before 5.0.4.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00451 · Published 2019-05-07 · Fixed CWE-416
THREATIST.IORead the docs