TI-2020-09874 CVE-2020-12351
Improper input validation in BlueZ
Priority MEDIUM 49
Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
RHSA-2020:4279
kernel-alt security update
Released 2020-10-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) kernel-4.14.0-115.32.1.el7a, kernel-abi-whitelists-4.14.0-115.32.1.el7a, kernel-alt-4.14.0-115.32.1.el7a +8
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kernel-debug-devel-4.14.0-115.32.1.el7a, kernel-tools-libs-devel-4.14.0-115.32.1.el7a
Fixes 4 records
TI-2020-09875 CVE-2020-12352
Missing initialization of resource in BlueZ
Priority LOW 38
Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.
TI-2020-15453 CVE-2020-25212 · GHSA-w56x-hj26-mq65
A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used…
Priority LOW 31
A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead…
TI-2020-12717 CVE-2020-16166 · GHSA-6c68-84gq-j9gr
The Linux kernel through 5.7.11 allows remote attackers to make observations that help to…
Priority LOW 26
The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c.