Red Hat Security AdvisoryRHSA-2020:5206
kernel security and bug fix update
Released 2020-11-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) bpftool-3.10.0-1062.40.1.el7, kernel-3.10.0-1062.40.1.el7, kernel-abi-whitelists-3.10.0-1062.40.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.40.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.7) bpftool-3.10.0-1062.40.1.el7, kernel-3.10.0-1062.40.1.el7, kernel-abi-whitelists-3.10.0-1062.40.1.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.7) kernel-debug-devel-3.10.0-1062.40.1.el7, kernel-tools-libs-devel-3.10.0-1062.40.1.el7
Fixes 5 records
Priority MEDIUM 40
In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/s…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.03523 · Published 2019-12-08 · Partial fix CWE-416
Priority LOW 35
A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_ge…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0316 · Published 2019-11-18 · Fixed CWE-401
Priority LOW 30
An issue was discovered in the Linux kernel through 5.6.11.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00586 · Published 2020-05-09 · Partial fix
Priority LOW 30
An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00434 · Published 2019-08-19 · Partial fix CWE-787
Priority LOW 29
In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00179 · Published 2019-09-06 · Partial fix CWE-787
THREATIST.IORead the docs