Red Hat Security AdvisoryRHSA-2020:3010
kernel security, bug fix, and enhancement update
Released 2020-07-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-193.13.2.el8_2
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-193.13.2.el8_2, kernel-4.18.0-193.13.2.el8_2, kernel-abi-whitelists-4.18.0-193.13.2.el8_2 +19
Fixes 9 records
Priority LOW 36
A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00992 · Published 2020-06-09 · Partial fix CWE-119
Priority LOW 35
In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00551 · Published 2019-12-15 · Fixed CWE-416
Priority LOW 34
An issue was found in Linux kernel before 5.5.4.
CVSS 3.1HIGH 7.1· Adjacent network · No auth · User interaction · EPSS 0.01218 · Published 2020-05-05 · Partial fix CWE-787
Priority LOW 34
An issue was found in Linux kernel before 5.5.4.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00452 · Published 2020-05-05 · Partial fix CWE-787
Priority LOW 29
In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00619 · Published 2020-01-31 · Fixed CWE-200
Priority LOW 25
A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00397 · Published 2020-09-15 · Fixed in 5.8-rc1 CWE-440
Priority LOW 25
A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier).
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00382 · Published 2020-09-15 · Fixed in 5.8-rc1 CWE-440
Priority LOW 25
A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00463 · Published 2020-09-15 · Fixed in 5.8-rc1 CWE-440
Priority LOW 24
The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
CVSS 3.1MEDIUM 5.3· Local · High privileges · No interaction · EPSS 0.00404 · Published 2020-05-15 · Fixed CWE-755