Red Hat Security Advisory

RHSA-2020:3016

kernel-rt security and bug fix update

Released 2020-07-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Real Time (v. 8) kernel-rt-4.18.0-193.13.2.rt13.65.el8_2, kernel-rt-core-4.18.0-193.13.2.rt13.65.el8_2, kernel-rt-debug-4.18.0-193.13.2.rt13.65.el8_2 +7
Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-193.13.2.rt13.65.el8_2, kernel-rt-core-4.18.0-193.13.2.rt13.65.el8_2, kernel-rt-debug-4.18.0-193.13.2.rt13.65.el8_2 +9

Fixes 9 records

TI-2020-08654 CVE-2020-10757 · GHSA-5r3p-jhq4-64gg

Memory corruption in Kernel

LOW 36

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00992 Published 2020-06-09 Partial fix CWE-119

TI-2019-14276 CVE-2019-19807 · GHSA-hxwj-xwvv-9vhc

In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by…

LOW 35

In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00551 Published 2019-12-15 Fixed CWE-416

TI-2020-10063 CVE-2020-12654 · GHSA-r2mg-x3w3-w45q

An issue was found in Linux kernel before 5.5.4.

LOW 34

An issue was found in Linux kernel before 5.5.4.

CVSS 3.1HIGH 7.1 Adjacent network No auth User interaction EPSS 0.01218 Published 2020-05-05 Partial fix CWE-787

TI-2020-10062 CVE-2020-12653 · GHSA-gj62-72x5-vwvc

An issue was found in Linux kernel before 5.5.4.

LOW 34

An issue was found in Linux kernel before 5.5.4.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00452 Published 2020-05-05 Partial fix CWE-787

TI-2019-02538 CVE-2019-3016 · GHSA-g7mw-cr59-r458

Information disclosure in linux_kernel

LOW 29

In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00619 Published 2020-01-31 Fixed CWE-200

TI-2020-08663 CVE-2020-10768 · GHSA-5hg9-992p-865c

A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can…

LOW 25

A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00397 Published 2020-09-15 Fixed in 5.8-rc1 CWE-440

TI-2020-08662 CVE-2020-10767 · GHSA-hmrm-3xmg-v873

A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced…

LOW 25

A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00382 Published 2020-09-15 Fixed in 5.8-rc1 CWE-440

TI-2020-08661 CVE-2020-10766 · GHSA-c87p-h49c-qjmw

A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD.

LOW 25

A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00463 Published 2020-09-15 Fixed in 5.8-rc1 CWE-440

TI-2020-10249 CVE-2020-12888 · GHSA-3rqr-2pp7-2956

The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.

LOW 24

The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.

CVSS 3.1MEDIUM 5.3 Local High privileges No interaction EPSS 0.00404 Published 2020-05-15 Fixed CWE-755