Red Hat Security AdvisoryRHSA-2020:0664
kernel security, bug fix, and enhancement update
Released 2020-03-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) bpftool-3.10.0-957.46.1.el7, kernel-3.10.0-957.46.1.el7, kernel-abi-whitelists-3.10.0-957.46.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.46.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.6) bpftool-3.10.0-957.46.1.el7, kernel-3.10.0-957.46.1.el7, kernel-abi-whitelists-3.10.0-957.46.1.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.6) kernel-debug-devel-3.10.0-957.46.1.el7, kernel-tools-libs-devel-3.10.0-957.46.1.el7
- Red Hat Virtualization 4.2 Hypervisor for RHEL 7.6 EUS kernel-devel-3.10.0-957.46.1.el7, perf-3.10.0-957.46.1.el7, python-perf-3.10.0-957.46.1.el7
Fixes 4 records
Priority MEDIUM 53
A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0776 · Published 2019-11-29 · Fixed CWE-122
Priority MEDIUM 52
In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06706 · Published 2019-10-04 · Partial fix CWE-120
Priority LOW 36
There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute ar…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00909 · Published 2019-09-20 · Fixed CWE-122
Priority LOW 35
An issue was discovered in the Linux kernel before 4.18.7.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00707 · Published 2019-07-26 · Fixed CWE-416
THREATIST.IORead the docs