linux - security update

Fixed packages 1

Vulnerabilities 15

• High 7.9
  CVE-2019-9503

  Broadcom brcmfmac driver is vulnerable to a frame validation bypass

  The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the is_wlc_event_frame function will cause this…

  Broadcom brcmfmac WiFi driver linux-raspi2 linux-hwe Debian Ubuntu
  Jan 16, 2020
• Medium 5.9
  CVE-2018-12130

  Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execut…

  Intel Central Processing Units (CPUs) linux-raspi2 linux-hwe Debian Ubuntu Alpine
  May 30, 2019
• Medium 5.6
  CVE-2018-12126

  Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative exec…

  Intel Central ProcCVE-2018-12126essing Units (CPUs) linux-raspi2 linux-hwe Debian Ubuntu Alpine
  May 30, 2019
• Medium 5.6
  CVE-2018-12127

  Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution …

  Intel Central Processing Units (CPUs) linux-raspi2 linux-hwe Debian Ubuntu Alpine
  May 30, 2019
• Medium 5.6
  CVE-2019-11091

  Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing specu…

  Intel Central Processing Units (CPUs) linux-raspi2 linux-hwe Debian Ubuntu Alpine
  May 30, 2019
• Medium 5.6
  CVE-2019-3901

  A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevan…

  The Linux Foundation Kernel linux-raspi2 linux-riscv Debian Ubuntu
  Apr 22, 2019
• Medium 4.7
  CVE-2019-3882

  A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory…

  The Linux Foundation Kernel linux-raspi2 linux-hwe Debian Ubuntu
  Apr 24, 2019
• Unscored —
  CVE-2018-5995

  The pcpu_embed_first_chunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sen…

  linux-hwe linux-azure linux-gcp linux Debian Ubuntu
  Aug 7, 2018
• Unscored —
  CVE-2019-11190

  The Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs (such as /bin/su) because install_exec…

  linux-raspi2 linux-riscv linux linux-gke Debian Ubuntu
  Apr 11, 2019
• Unscored —
  CVE-2019-11486

  The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race co…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Apr 23, 2019
• Unscored —
  CVE-2019-11599 Public exploit

  The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma l…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Apr 29, 2019
• Unscored —
  CVE-2019-2024

  In em28xx_unregister_dvb of em28xx-dvb.c, there is a possible use after free issue. This could lead to local escalation…

  linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
  Jun 19, 2019
• Unscored —
  CVE-2019-3459

  A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 11, 2019
• Unscored —
  CVE-2019-3460

  A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 11, 2019
• Unscored —
  CVE-2019-6133

  In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, an…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jan 11, 2019