Red Hat Security AdvisoryRHSA-2020:3041
kernel security and bug fix update
Released 2020-07-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS E4S (v. 8.0) bpftool-4.18.0-80.27.1.el8_0, kernel-4.18.0-80.27.1.el8_0, kernel-abi-whitelists-4.18.0-80.27.1.el8_0 +14
Fixes 7 records
Priority LOW 36
A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00992 · Published 2020-06-09 · Partial fix CWE-119
Priority LOW 34
An issue was found in Linux kernel before 5.5.4.
CVSS 3.1HIGH 7.1· Adjacent network · No auth · User interaction · EPSS 0.01218 · Published 2020-05-05 · Partial fix CWE-787
Priority LOW 34
An issue was found in Linux kernel before 5.5.4.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00452 · Published 2020-05-05 · Partial fix CWE-787
Priority LOW 25
A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00397 · Published 2020-09-15 · Fixed in 5.8-rc1 CWE-440
Priority LOW 25
A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier).
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00382 · Published 2020-09-15 · Fixed in 5.8-rc1 CWE-440
Priority LOW 25
A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00463 · Published 2020-09-15 · Fixed in 5.8-rc1 CWE-440
Priority LOW 24
The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
CVSS 3.1MEDIUM 5.3· Local · High privileges · No interaction · EPSS 0.00404 · Published 2020-05-15 · Fixed CWE-755