Red Hat Security AdvisoryRHSA-2020:3230
kernel security and bug fix update
Released 2020-07-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.4) kernel-3.10.0-693.71.2.el7, kernel-abi-whitelists-3.10.0-693.71.2.el7, kernel-debug-3.10.0-693.71.2.el7 +7
- Red Hat Enterprise Linux Server E4S (v. 7.4) kernel-3.10.0-693.71.2.el7, kernel-abi-whitelists-3.10.0-693.71.2.el7, kernel-bootwrapper-3.10.0-693.71.2.el7 +8
- Red Hat Enterprise Linux Server Optional AUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.71.2.el7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.4) kernel-debug-devel-3.10.0-693.71.2.el7, kernel-tools-libs-devel-3.10.0-693.71.2.el7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.71.2.el7
- Red Hat Enterprise Linux Server TUS (v. 7.4) kernel-3.10.0-693.71.2.el7, kernel-abi-whitelists-3.10.0-693.71.2.el7, kernel-debug-3.10.0-693.71.2.el7 +7
Fixes 2 records
Priority LOW 35
The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00708 · Published 2019-04-23 · Fixed CWE-416
Priority LOW 24
The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
CVSS 3.1MEDIUM 5.3· Local · High privileges · No interaction · EPSS 0.00404 · Published 2020-05-15 · Fixed CWE-755
