Red Hat Security Advisory

RHSA-2020:0374

kernel security and bug fix update

Released 2020-02-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1062.12.1.el7, kernel-3.10.0-1062.12.1.el7, kernel-abi-whitelists-3.10.0-1062.12.1.el7 +8
Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1062.12.1.el7
Red Hat Enterprise Linux ComputeNode (v. 7) bpftool-3.10.0-1062.12.1.el7, kernel-3.10.0-1062.12.1.el7, kernel-abi-whitelists-3.10.0-1062.12.1.el7 +8
Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1062.12.1.el7
Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1062.12.1.el7, kernel-3.10.0-1062.12.1.el7, kernel-abi-whitelists-3.10.0-1062.12.1.el7 +11
Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1062.12.1.el7, kernel-tools-libs-devel-3.10.0-1062.12.1.el7
Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1062.12.1.el7, kernel-3.10.0-1062.12.1.el7, kernel-abi-whitelists-3.10.0-1062.12.1.el7 +8
Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1062.12.1.el7

Fixes 5 records

TI-2019-11105 CVE-2019-14901 · GHSA-6mpr-24px-gq7m

Heap-based buffer overflow in Red Hat kernel

MEDIUM 59

A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16473 Published 2019-11-29 Partial fix CWE-122

TI-2019-11099 CVE-2019-14895 · GHSA-vxv9-h8fr-8f88

Heap-based buffer overflow in Red Hat kernel

MEDIUM 53

A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0776 Published 2019-11-29 Fixed CWE-122

TI-2019-12784 CVE-2019-17133 · GHSA-4v38-w5qx-qhmh

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c…

MEDIUM 52

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06706 Published 2019-10-04 Partial fix CWE-120

TI-2019-11021 CVE-2019-14816 · GHSA-5prc-226w-5qr4

Heap-based buffer overflow in Linux kernel

LOW 36

There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute ar…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00909 Published 2019-09-20 Fixed CWE-122

TI-2019-11102 CVE-2019-14898 · GHSA-8qqf-qhmm-w3cm

Race condition in Linux kernel

LOW 31

The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00436 Published 2020-05-08 Partial fix · 5.0.10 CWE-362