Red Hat Security AdvisoryRHSA-2020:2854
kernel-alt security and bug fix update
Released 2020-07-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) kernel-4.14.0-115.26.1.el7a, kernel-abi-whitelists-4.14.0-115.26.1.el7a, kernel-alt-4.14.0-115.26.1.el7a +8
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kernel-debug-devel-4.14.0-115.26.1.el7a, kernel-tools-libs-devel-4.14.0-115.26.1.el7a
Fixes 12 records
Priority LOW 38
A flaw was found in the Linux kernel's NFS41+ subsystem.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.01455 · Published 2018-12-18 · Fixed CWE-416
Priority LOW 32
An issue was discovered in the Linux kernel before 5.0.5.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00643 · Published 2019-09-04 · Partial fix CWE-416
Priority LOW 31
An issue was discovered in the Linux kernel before 5.0.4.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00451 · Published 2019-05-07 · Fixed CWE-416
Priority LOW 30
In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00399 · Published 2020-04-08 · Partial fix CWE-787
Priority LOW 30
In the Android kernel in the video driver there is a use after free due to a race condition.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00169 · Published 2019-09-06 · Partial fix CWE-362
Priority LOW 29
KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00347 · Published 2020-04-09 · Partial fix · 4.18 CWE-368
Priority LOW 29
The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4e…
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.02081 · Published 2019-12-12 · Partial fix CWE-416
Priority LOW 27
An issue was discovered in the Linux kernel through 5.6.2.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00517 · Published 2020-04-06 · Partial fix CWE-787
Priority LOW 25
A flaw was found in the Linux kernel's implementation of GRO in versions before 5.2.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00336 · Published 2020-09-03 · Partial fix CWE-416
Priority LOW 25
A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00329 · Published 2019-11-07 · Partial fix CWE-401
Priority LOW 24
The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
CVSS 3.1MEDIUM 5.3· Local · High privileges · No interaction · EPSS 0.00404 · Published 2020-05-15 · Fixed CWE-755
Priority LOW 23
A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures,…
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00633 · Published 2019-11-18 · Partial fix CWE-401