Red Hat Security AdvisoryRHSA-2020:0790
kernel security and bug fix update
Released 2020-03-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-754.28.1.el6, kernel-abi-whitelists-2.6.32-754.28.1.el6, kernel-debug-2.6.32-754.28.1.el6 +5
- Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-754.28.1.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-754.28.1.el6, kernel-abi-whitelists-2.6.32-754.28.1.el6, kernel-debug-2.6.32-754.28.1.el6 +5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-754.28.1.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-754.28.1.el6, kernel-abi-whitelists-2.6.32-754.28.1.el6, kernel-bootwrapper-2.6.32-754.28.1.el6 +8
- Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-754.28.1.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-754.28.1.el6, kernel-abi-whitelists-2.6.32-754.28.1.el6, kernel-debug-2.6.32-754.28.1.el6 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-754.28.1.el6
Fixes 2 records
Priority MEDIUM 52
In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06706 · Published 2019-10-04 · Partial fix CWE-120
Priority LOW 17
base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2…
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00542 · Published 2019-10-01 · Partial fix CWE-862
