Red Hat Security AdvisoryRHSA-2020:1372
kernel security and bug fix update
Released 2020-04-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-147.8.1.el8_1
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-147.8.1.el8_1, kernel-4.18.0-147.8.1.el8_1, kernel-abi-whitelists-4.18.0-147.8.1.el8_1 +19
Fixes 4 records
Priority LOW 30
In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00445 · Published 2019-12-03 · Partial fix CWE-416
Priority LOW 23
The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58.
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00736 · Published 2019-11-27 · Partial fix CWE-200
Priority LOW 21
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt.
CVSS 3.1MEDIUM 4.4· Local · Low privileges · No interaction · EPSS 0.00555 · Published 2019-09-13 · Partial fix CWE-662
Priority LOW 21
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception.
CVSS 3.1MEDIUM 4.4· Local · Low privileges · No interaction · EPSS 0.00451 · Published 2019-09-13 · Partial fix CWE-862
THREATIST.IORead the docs