linux-4.9 - security update

Fixed packages 1

Vulnerabilities 14

• Medium 6.3
  CVE-2019-3900

  An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while han…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Apr 25, 2019
• Medium 5.6
  CVE-2019-1125 Public exploit

  Windows Kernel Information Disclosure Vulnerability

  An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability,…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Debian Ubuntu
  Sep 3, 2019
• Medium 4.7
  CVE-2019-10207 Public exploit

  A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and ke…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Nov 25, 2019
• Medium 4.7
  CVE-2019-3882

  A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory…

  The Linux Foundation Kernel linux-raspi2 linux-hwe Debian Ubuntu
  Apr 24, 2019
• Unscored —
  CVE-2017-18509

  An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an at…

  linux-raspi2 linux-hwe linux-riscv linux-gcp Debian Ubuntu
  Aug 13, 2019
• Unscored —
  CVE-2018-20836

  An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 7, 2019
• Unscored —
  CVE-2018-20856

  An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an __blk_drain_queue() use-aft…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 26, 2019
• Unscored —
  CVE-2018-5995

  The pcpu_embed_first_chunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sen…

  linux-hwe linux-azure linux-gcp linux Debian Ubuntu
  Aug 7, 2018
• Unscored —
  CVE-2019-10638

  In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jul 5, 2019
• Unscored —
  CVE-2019-10639

  The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address discl…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 5, 2019
• Unscored —
  CVE-2019-13631

  In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 17, 2019
• Unscored —
  CVE-2019-13648

  In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user…

  linux-hwe linux-azure linux-riscv linux Debian Ubuntu
  Jul 19, 2019
• Unscored —
  CVE-2019-14283

  In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 26, 2019
• Unscored —
  CVE-2019-14284

  In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setup_format_params division-by-…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 26, 2019