Red Hat Security AdvisoryRHSA-2020:4289
kernel-rt security and bug fix update
Released 2020-10-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Real Time (v. 8) kernel-rt-4.18.0-193.28.1.rt13.77.el8_2, kernel-rt-core-4.18.0-193.28.1.rt13.77.el8_2, kernel-rt-debug-4.18.0-193.28.1.rt13.77.el8_2 +7
- Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-193.28.1.rt13.77.el8_2, kernel-rt-core-4.18.0-193.28.1.rt13.77.el8_2, kernel-rt-debug-4.18.0-193.28.1.rt13.77.el8_2 +9
Fixes 5 records
Priority MEDIUM 49
Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.07756 · Published 2020-11-23 · Fixed CWE-20
Priority LOW 38
Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.0576 · Published 2020-11-23 · Fixed CWE-909
Priority LOW 37
A flaw was found in the Linux kernel before 5.9-rc4.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01319 · Published 2020-09-16 · Fixed in 5.9-rc4 CWE-250
Priority LOW 30
A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occu…
CVSS 3.1MEDIUM 6.6· Physical · Low privileges · No interaction · EPSS 0.00563 · Published 2020-09-15 · Partial fix CWE-787
Priority LOW 25
A flaw was found in the Linux kernel before 5.9-rc4.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00416 · Published 2020-09-15 · Fixed in 5.9-rc4 CWE-131