Red Hat Security Advisory

RHSA-2020:4287

kernel security and bug fix update

Released 2020-10-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v. 8.1) kernel-tools-libs-devel-4.18.0-147.32.1.el8_1
Red Hat Enterprise Linux BaseOS EUS (v. 8.1) bpftool-4.18.0-147.32.1.el8_1, kernel-4.18.0-147.32.1.el8_1, kernel-abi-whitelists-4.18.0-147.32.1.el8_1 +19

TI-2020-09874 CVE-2020-12351

MEDIUM 49

Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.07756 Published 2020-11-23 Fixed CWE-20

TI-2020-09875 CVE-2020-12352

LOW 38

Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0576 Published 2020-11-23 Fixed CWE-909

TI-2020-11254 CVE-2020-14386

LOW 37

A flaw was found in the Linux kernel before 5.9-rc4.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01319 Published 2020-09-16 Fixed in 5.9-rc4 CWE-250

TI-2020-11253 CVE-2020-14385 · GHSA-3vmf-5cc3-6gf8

LOW 25

A flaw was found in the Linux kernel before 5.9-rc4.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00416 Published 2020-09-15 Fixed in 5.9-rc4 CWE-131