Red Hat Security AdvisoryRHSA-2020:0653
kernel security and bug fix update
Released 2020-03-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.3) kernel-3.10.0-514.73.1.el7, kernel-abi-whitelists-3.10.0-514.73.1.el7, kernel-debug-3.10.0-514.73.1.el7 +7
- Red Hat Enterprise Linux Server E4S (v. 7.3) kernel-3.10.0-514.73.1.el7, kernel-abi-whitelists-3.10.0-514.73.1.el7, kernel-bootwrapper-3.10.0-514.73.1.el7 +8
- Red Hat Enterprise Linux Server Optional AUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.73.1.el7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.3) kernel-debug-devel-3.10.0-514.73.1.el7, kernel-tools-libs-devel-3.10.0-514.73.1.el7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.73.1.el7
- Red Hat Enterprise Linux Server TUS (v. 7.3) kernel-3.10.0-514.73.1.el7, kernel-abi-whitelists-3.10.0-514.73.1.el7, kernel-debug-3.10.0-514.73.1.el7 +7
Fixes 3 records
Priority MEDIUM 53
A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0776 · Published 2019-11-29 · Fixed CWE-122
Priority MEDIUM 52
In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06706 · Published 2019-10-04 · Partial fix CWE-120
Priority LOW 36
There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute ar…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00909 · Published 2019-09-20 · Fixed CWE-122
THREATIST.IORead the docs