Red Hat Security AdvisoryRHSA-2020:0834
kernel security, bug fix, and enhancement update
Released 2020-03-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1062.18.1.el7, kernel-3.10.0-1062.18.1.el7, kernel-abi-whitelists-3.10.0-1062.18.1.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1062.18.1.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) bpftool-3.10.0-1062.18.1.el7, kernel-3.10.0-1062.18.1.el7, kernel-abi-whitelists-3.10.0-1062.18.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1062.18.1.el7
- Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1062.18.1.el7, kernel-3.10.0-1062.18.1.el7, kernel-abi-whitelists-3.10.0-1062.18.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1062.18.1.el7, kernel-tools-libs-devel-3.10.0-1062.18.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1062.18.1.el7, kernel-3.10.0-1062.18.1.el7, kernel-abi-whitelists-3.10.0-1062.18.1.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1062.18.1.el7
Fixes 3 records
Priority MEDIUM 44
rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.03017 · Published 2019-10-17 · Fixed CWE-120
Priority LOW 35
The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00708 · Published 2019-04-23 · Fixed CWE-416
Priority LOW 25
A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort (TAA) error occurs.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00475 · Published 2020-07-13 · Partial fix · 5.5 CWE-203
THREATIST.IORead the docs