TI-2020-15660 CVE-2020-25643 · GHSA-vhhq-pmj4-x7gm
Improper input validation in kernel
Priority LOW 38
A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7.
RHSA-2020:5437
kernel security and bug fix update
Released 2020-12-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1160.11.1.el7, kernel-3.10.0-1160.11.1.el7, kernel-abi-whitelists-3.10.0-1160.11.1.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.11.1.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.11.1.el7
- Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1160.11.1.el7, kernel-3.10.0-1160.11.1.el7, kernel-abi-whitelists-3.10.0-1160.11.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1160.11.1.el7, kernel-tools-libs-devel-3.10.0-1160.11.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1160.11.1.el7, kernel-3.10.0-1160.11.1.el7, kernel-abi-whitelists-3.10.0-1160.11.1.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.11.1.el7
Fixes 7 records
TI-2020-15453 CVE-2020-25212 · GHSA-w56x-hj26-mq65
A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used…
Priority LOW 31
A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead…
TI-2020-14934 CVE-2020-24394 · GHSA-fvv9-qhmx-c8wm
In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect…
Priority LOW 31
In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131.
TI-2019-13290 CVE-2019-18282 · GHSA-gc9j-xjc6-h7v6
The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device…
Priority LOW 29
The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f.
TI-2020-11253 CVE-2020-14385 · GHSA-3vmf-5cc3-6gf8
A flaw was found in the Linux kernel before 5.9-rc4.
Priority LOW 25
A flaw was found in the Linux kernel before 5.9-rc4.
TI-2020-11185 CVE-2020-14314 · GHSA-4vqp-m886-hqhq
Out-of-bounds read in Linux kernel
Priority LOW 25
A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with broken indexing.
TI-2020-08664 CVE-2020-10769 · GHSA-ccvh-qcqm-vp82
Out-of-bounds read in Kernel
Priority LOW 25
A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc.