Red Hat Security Advisory

RHSA-2020:0592

kernel security, bug fix, and enhancement update

Released 2020-02-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.4) kernel-3.10.0-693.64.1.el7, kernel-abi-whitelists-3.10.0-693.64.1.el7, kernel-debug-3.10.0-693.64.1.el7 +7
Red Hat Enterprise Linux Server E4S (v. 7.4) kernel-3.10.0-693.64.1.el7, kernel-abi-whitelists-3.10.0-693.64.1.el7, kernel-bootwrapper-3.10.0-693.64.1.el7 +8
Red Hat Enterprise Linux Server Optional AUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.64.1.el7
Red Hat Enterprise Linux Server Optional E4S (v. 7.4) kernel-debug-devel-3.10.0-693.64.1.el7, kernel-tools-libs-devel-3.10.0-693.64.1.el7
Red Hat Enterprise Linux Server Optional TUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.64.1.el7
Red Hat Enterprise Linux Server TUS (v. 7.4) kernel-3.10.0-693.64.1.el7, kernel-abi-whitelists-3.10.0-693.64.1.el7, kernel-debug-3.10.0-693.64.1.el7 +7

Fixes 4 records

TI-2019-11099 CVE-2019-14895 · GHSA-vxv9-h8fr-8f88

Heap-based buffer overflow in Red Hat kernel

MEDIUM 53

A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0776 Published 2019-11-29 Fixed CWE-122

TI-2019-12784 CVE-2019-17133 · GHSA-4v38-w5qx-qhmh

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c…

MEDIUM 52

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06706 Published 2019-10-04 Partial fix CWE-120

TI-2019-08290 CVE-2019-11085 · GHSA-2wcq-j266-p9cq

Improper input validation in Intel i915 Graphics for Linux

LOW 35

Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00475 Published 2019-05-17 Partial fix · 5.0. CWE-20

TI-2018-14938 CVE-2018-20976 · GHSA-2px5-xhf9-x464

An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18.

LOW 35

An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00632 Published 2019-08-19 Fixed CWE-416