Red Hat Security AdvisoryRHSA-2020:2199
kernel security, bug fix, and enhancement update
Released 2020-05-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v. 8.1) kernel-tools-libs-devel-4.18.0-147.13.2.el8_1
- Red Hat Enterprise Linux BaseOS EUS (v. 8.1) bpftool-4.18.0-147.13.2.el8_1, kernel-4.18.0-147.13.2.el8_1, kernel-abi-whitelists-4.18.0-147.13.2.el8_1 +19
Fixes 3 records
Priority MEDIUM 40
In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0415 · Published 2019-12-12 · Partial fix CWE-416
Priority LOW 32
A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.03083 · Published 2020-05-22 · Fixed in 5.7 CWE-476
Priority LOW 31
In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00397 · Published 2020-04-29 · Fixed CWE-362
