Red Hat Security AdvisoryRHSA-2020:0839
kernel-rt security and bug fix update
Released 2020-03-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Realtime (v. 7) kernel-rt-3.10.0-1062.18.1.rt56.1044.el7, kernel-rt-debug-3.10.0-1062.18.1.rt56.1044.el7, kernel-rt-debug-devel-3.10.0-1062.18.1.rt56.1044.el7 +4
- Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-1062.18.1.rt56.1044.el7, kernel-rt-debug-3.10.0-1062.18.1.rt56.1044.el7, kernel-rt-debug-devel-3.10.0-1062.18.1.rt56.1044.el7 +7
Fixes 3 records
Priority MEDIUM 44
rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.03017 · Published 2019-10-17 · Fixed CWE-120
Priority LOW 35
The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00708 · Published 2019-04-23 · Fixed CWE-416
Priority LOW 25
A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort (TAA) error occurs.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00475 · Published 2020-07-13 · Partial fix · 5.5 CWE-203
THREATIST.IORead the docs