Red Hat Security AdvisoryRHSA-2020:2851
kernel security and bug fix update
Released 2020-07-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) bpftool-3.10.0-957.56.1.el7, kernel-3.10.0-957.56.1.el7, kernel-abi-whitelists-3.10.0-957.56.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.56.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.6) bpftool-3.10.0-957.56.1.el7, kernel-3.10.0-957.56.1.el7, kernel-abi-whitelists-3.10.0-957.56.1.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.6) kernel-debug-devel-3.10.0-957.56.1.el7, kernel-tools-libs-devel-3.10.0-957.56.1.el7
- Red Hat Virtualization 4.2 Hypervisor for RHEL 7.6 EUS kernel-devel-3.10.0-957.56.1.el7, perf-3.10.0-957.56.1.el7, python-perf-3.10.0-957.56.1.el7
Fixes 9 records
Priority LOW 39
An issue was discovered in the Linux kernel before 5.0.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03857 · Published 2019-09-04 · Partial fix CWE-401
Priority LOW 39
An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00763 · Published 2019-09-19 · Partial fix CWE-787
Priority LOW 35
The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00708 · Published 2019-04-23 · Fixed CWE-416
Priority LOW 31
In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.
CVSS 3.0HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00487 · Published 2019-07-04 · Partial fix CWE-362
Priority LOW 31
An issue was discovered in the Linux kernel before 4.19.9.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00581 · Published 2018-12-17 · Partial fix CWE-400
Priority LOW 26
In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00654 · Published 2019-05-17 · Partial fix CWE-476
Priority LOW 24
The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
CVSS 3.1MEDIUM 5.3· Local · High privileges · No interaction · EPSS 0.00404 · Published 2020-05-15 · Fixed CWE-755
Priority LOW 23
The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58.
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00736 · Published 2019-11-27 · Partial fix CWE-200
Priority LOW 22
A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs.
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00339 · Published 2019-04-22 · Partial fix CWE-667