Red Hat Security AdvisoryRHSA-2020:0103
kernel security and bug fix update
Released 2020-01-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.4) kernel-3.10.0-693.62.1.el7, kernel-abi-whitelists-3.10.0-693.62.1.el7, kernel-debug-3.10.0-693.62.1.el7 +7
- Red Hat Enterprise Linux Server E4S (v. 7.4) kernel-3.10.0-693.62.1.el7, kernel-abi-whitelists-3.10.0-693.62.1.el7, kernel-bootwrapper-3.10.0-693.62.1.el7 +8
- Red Hat Enterprise Linux Server Optional AUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.62.1.el7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.4) kernel-debug-devel-3.10.0-693.62.1.el7, kernel-tools-libs-devel-3.10.0-693.62.1.el7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.62.1.el7
- Red Hat Enterprise Linux Server TUS (v. 7.4) kernel-3.10.0-693.62.1.el7, kernel-abi-whitelists-3.10.0-693.62.1.el7, kernel-debug-3.10.0-693.62.1.el7 +7
Fixes 5 records
Priority MEDIUM 52
In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.16523 · Published 2019-02-15 · Fixed CWE-362
Priority LOW 36
Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01104 · Published 2018-10-30 · Fixed CWE-459
Priority LOW 35
An issue was discovered in the Linux kernel before 4.18.7.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00707 · Published 2019-07-26 · Fixed CWE-416
Priority LOW 34
A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0047 · Published 2018-09-11 · Fixed CWE-250
Priority LOW 33
The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, c…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00989 · Published 2019-04-29 · Partial fix CWE-667
THREATIST.IORead the docs