Red Hat Security AdvisoryRHSA-2020:0543
kernel security, bug fix, and enhancement update
Released 2020-02-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) kernel-3.10.0-862.48.1.el7, kernel-abi-whitelists-3.10.0-862.48.1.el7, kernel-debug-3.10.0-862.48.1.el7 +7
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) kernel-tools-libs-devel-3.10.0-862.48.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.5) kernel-3.10.0-862.48.1.el7, kernel-abi-whitelists-3.10.0-862.48.1.el7, kernel-bootwrapper-3.10.0-862.48.1.el7 +10
- Red Hat Enterprise Linux Server Optional EUS (v. 7.5) kernel-debug-devel-3.10.0-862.48.1.el7, kernel-tools-libs-devel-3.10.0-862.48.1.el7
Fixes 7 records
Priority MEDIUM 53
A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0776 · Published 2019-11-29 · Fixed CWE-122
Priority MEDIUM 52
In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06706 · Published 2019-10-04 · Partial fix CWE-120
Priority MEDIUM 44
rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.03017 · Published 2019-10-17 · Fixed CWE-120
Priority LOW 35
Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00475 · Published 2019-05-17 · Partial fix · 5.0. CWE-20
Priority LOW 35
An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00632 · Published 2019-08-19 · Fixed CWE-416
Priority LOW 35
An issue was discovered in the Linux kernel before 4.18.7.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00707 · Published 2019-07-26 · Fixed CWE-416
Priority LOW 33
The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, c…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00989 · Published 2019-04-29 · Partial fix CWE-667
THREATIST.IORead the docs