Red Hat Security Advisory

RHSA-2020:4685

kernel security update

Released 2020-11-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-240.1.1.el8_3
Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-240.1.1.el8_3, kernel-4.18.0-240.1.1.el8_3, kernel-abi-whitelists-4.18.0-240.1.1.el8_3 +19

Fixes 3 records

TI-2020-15678 CVE-2020-25661 · GHSA-5jpw-97pv-5g28

Type confusion in Red Hat kernel

MEDIUM 42

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01786 Published 2020-11-05 Fixed CWE-843

TI-2020-15005 CVE-2020-24490

Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially…

LOW 33

Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.02241 Published 2021-02-02 Fixed

TI-2020-15679 CVE-2020-25662 · GHSA-6v9p-cxvf-8f7v

Improper access control in Red Hat kernel

LOW 31

A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack memory when handling certain AMP packets.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01182 Published 2020-11-05 Fixed CWE-284