Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 15

Vulnerabilities 14

• Medium 5.9
  CVE-2018-12130

  Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execut…

  Intel Central Processing Units (CPUs) linux-raspi2 linux-hwe Debian Ubuntu Alpine
  May 30, 2019
• Medium 5.6
  CVE-2018-12126

  Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative exec…

  Intel Central ProcCVE-2018-12126essing Units (CPUs) linux-raspi2 linux-hwe Debian Ubuntu Alpine
  May 30, 2019
• Medium 5.6
  CVE-2018-12127

  Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution …

  Intel Central Processing Units (CPUs) linux-raspi2 linux-hwe Debian Ubuntu Alpine
  May 30, 2019
• Medium 5.6
  CVE-2019-11091

  Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing specu…

  Intel Central Processing Units (CPUs) linux-raspi2 linux-hwe Debian Ubuntu Alpine
  May 30, 2019
• Unscored —
  CVE-2016-7913

  The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users…

  linux-raspi2 linux-riscv linux linux-gke Debian Ubuntu
  Nov 16, 2016
• Unscored —
  CVE-2016-8633

  drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote atta…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 28, 2016
• Unscored —
  CVE-2017-11600

  net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that th…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 24, 2017
• Unscored —
  CVE-2017-12190

  The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcou…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Nov 22, 2017
• Unscored —
  CVE-2017-13215

  A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. And…

  Google Android linux linux Android Debian Ubuntu
  Jan 12, 2018
• Unscored —
  CVE-2017-16939 Public exploit

  The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to ga…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 24, 2017
• Unscored —
  CVE-2017-17558

  The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel throu…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 12, 2017
• Unscored —
  CVE-2018-1068

  A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a priv…

  Linux Kernel Organization Linux Kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 16, 2018
• Unscored —
  CVE-2018-18559

  In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 22, 2018
• Unscored —
  CVE-2018-3665

  System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potenti…

  Intel Intel Core-based microprocessors linux-raspi2 linux-riscv Debian Ubuntu Alpine
  Jun 21, 2018

References

• article
  https://access.redhat.com/security/vulnerabilities/mds
• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1391490
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1402885
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1474928
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1495089
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1517220
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1525474
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1535173
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552048
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1585011
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641878
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646781
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646784
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1667782
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1692711
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1705312
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1190.json
• report
  https://access.redhat.com/security/cve/CVE-2016-7913
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-7913
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-7913
• report
  https://access.redhat.com/security/cve/CVE-2016-8633
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-8633
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-8633
• report
  https://access.redhat.com/security/cve/CVE-2017-11600
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-11600
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-11600
• report
  https://access.redhat.com/security/cve/CVE-2017-12190
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12190
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12190
• report
  https://access.redhat.com/security/cve/CVE-2017-13215
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-13215
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-13215
• report
  https://access.redhat.com/security/cve/CVE-2017-16939
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-16939
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-16939
• report
  https://access.redhat.com/security/cve/CVE-2017-17558
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-17558
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-17558