Red Hat Security AdvisoryRHSA-2020:1465
kernel security, bug fix, and enhancement update
Released 2020-04-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) bpftool-3.10.0-957.48.1.el7, kernel-3.10.0-957.48.1.el7, kernel-abi-whitelists-3.10.0-957.48.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.48.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.6) bpftool-3.10.0-957.48.1.el7, kernel-3.10.0-957.48.1.el7, kernel-abi-whitelists-3.10.0-957.48.1.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.6) kernel-debug-devel-3.10.0-957.48.1.el7, kernel-tools-libs-devel-3.10.0-957.48.1.el7
- Red Hat Virtualization 4.2 Hypervisor for RHEL 7.6 EUS kernel-devel-3.10.0-957.48.1.el7, perf-3.10.0-957.48.1.el7, python-perf-3.10.0-957.48.1.el7
Fixes 2 records
Priority MEDIUM 44
rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.03017 · Published 2019-10-17 · Fixed CWE-120
Priority LOW 25
A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort (TAA) error occurs.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00475 · Published 2020-07-13 · Partial fix · 5.5 CWE-203
