Red Hat Security AdvisoryRHSA-2020:5441
kernel-rt security and bug fix update
Released 2020-12-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux for Real Time (v. 7) kernel-rt-3.10.0-1160.11.1.rt56.1145.el7, kernel-rt-debug-3.10.0-1160.11.1.rt56.1145.el7, kernel-rt-debug-devel-3.10.0-1160.11.1.rt56.1145.el7 +4
- Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-1160.11.1.rt56.1145.el7, kernel-rt-debug-3.10.0-1160.11.1.rt56.1145.el7, kernel-rt-debug-devel-3.10.0-1160.11.1.rt56.1145.el7 +7
Fixes 7 records
Priority LOW 38
A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03292 · Published 2020-10-06 · Partial fix CWE-20
Priority LOW 31
A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00277 · Published 2020-09-09 · Partial fix CWE-367
Priority LOW 31
In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00361 · Published 2020-08-19 · Partial fix CWE-732
Priority LOW 29
The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02917 · Published 2020-01-16 · Partial fix CWE-330
Priority LOW 25
A flaw was found in the Linux kernel before 5.9-rc4.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00416 · Published 2020-09-15 · Fixed in 5.9-rc4 CWE-131
Priority LOW 25
A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with broken indexing.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00371 · Published 2020-09-15 · Partial fix · 5.9-rc2 CWE-125
Priority LOW 25
A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0051 · Published 2020-06-26 · Partial fix · 5.0 CWE-125