Red Hat Security Advisory: kernel-alt security and bug fix update

Fixed packages 20

Vulnerabilities 8

• Unscored —
  CVE-2018-13053

  The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 2, 2018
• Unscored —
  CVE-2018-13094

  An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a co…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 3, 2018
• Unscored —
  CVE-2018-14734

  drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a certain data…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 29, 2018
• Unscored —
  CVE-2018-17972

  An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does n…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 3, 2018
• Unscored —
  CVE-2018-18281

  Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 30, 2018
• Unscored —
  CVE-2018-18386

  drivers/tty/n_tty.c in the Linux kernel before 4.14.11 allows local attackers (who are able to access pseudo terminals)…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 17, 2018
• Unscored —
  CVE-2018-18397

  The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl ca…

  linux-raspi2 linux-hwe linux-azure linux-gcp Debian Ubuntu
  Dec 12, 2018
• Unscored —
  CVE-2019-9213 Public exploit

  In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which mak…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 5, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1597747
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1597771
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1611005
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1636349
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640598
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641548
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1645121
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1686136
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0831.json
• report
  https://access.redhat.com/security/cve/CVE-2018-13053
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-13053
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-13053
• report
  https://access.redhat.com/security/cve/CVE-2018-13094
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-13094
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-13094
• report
  https://access.redhat.com/security/cve/CVE-2018-14734
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-14734
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-14734
• report
  https://access.redhat.com/security/cve/CVE-2018-17972
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-17972
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-17972
• report
  https://access.redhat.com/security/cve/CVE-2018-18281
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-18281
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-18281
• report
  https://access.redhat.com/security/cve/CVE-2018-18386
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-18386
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-18386
• report
  https://access.redhat.com/security/cve/CVE-2018-18397
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-18397
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-18397
• report
  https://access.redhat.com/security/cve/CVE-2019-9213
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-9213
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-9213