Red Hat Security AdvisoryRHSA-2020:2104
kernel-alt security and bug fix update
Released 2020-05-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) kernel-4.14.0-115.21.2.el7a, kernel-abi-whitelists-4.14.0-115.21.2.el7a, kernel-alt-4.14.0-115.21.2.el7a +8
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kernel-debug-devel-4.14.0-115.21.2.el7a, kernel-tools-libs-devel-4.14.0-115.21.2.el7a
Fixes 10 records
Priority MEDIUM 40
In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0415 · Published 2019-12-12 · Partial fix CWE-416
Priority MEDIUM 40
In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/s…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.03523 · Published 2019-12-08 · Partial fix CWE-416
Priority LOW 39
An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03916 · Published 2019-08-25 · Partial fix CWE-400
Priority LOW 34
An issue was discovered in the Linux kernel before 4.14.11.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00363 · Published 2019-09-04 · Fixed CWE-415
Priority LOW 33
An issue was discovered in the Linux kernel 3.16 through 5.5.6.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00761 · Published 2020-02-25 · Partial fix CWE-125
Priority LOW 32
A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.03083 · Published 2020-05-22 · Fixed in 5.7 CWE-476
Priority LOW 30
An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00434 · Published 2019-08-19 · Partial fix CWE-787
Priority LOW 29
In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00179 · Published 2019-09-06 · Partial fix CWE-787
Priority LOW 23
In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver, aka CID-fa3a5a1880c9.
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00738 · Published 2019-12-03 · Partial fix CWE-416
Priority LOW 20
An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6.
CVSS 3.1MEDIUM 4.1· Local · High privileges · No interaction · EPSS 0.00648 · Published 2019-06-03 · Fixed CWE-476
THREATIST.IORead the docs