Red Hat Security AdvisoryRHSA-2020:4236
kernel security and bug fix update
Released 2020-10-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) bpftool-3.10.0-1062.36.1.el7, kernel-3.10.0-1062.36.1.el7, kernel-abi-whitelists-3.10.0-1062.36.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.36.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.7) bpftool-3.10.0-1062.36.1.el7, kernel-3.10.0-1062.36.1.el7, kernel-abi-whitelists-3.10.0-1062.36.1.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.7) kernel-debug-devel-3.10.0-1062.36.1.el7, kernel-tools-libs-devel-3.10.0-1062.36.1.el7
Fixes 1 record
Priority LOW 30
In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00445 · Published 2019-12-03 · Partial fix CWE-416
