Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 41

Vulnerabilities 5

• High 7.5
  CVE-2018-16871

  A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacke…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Jul 30, 2019
• Medium 6.5
  CVE-2018-16884

  A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the s…

  [UNKNOWN] kernel: linux-raspi2 linux-hwe Debian Ubuntu
  Dec 18, 2018
• Medium 5.6
  CVE-2019-1125 Public exploit

  Windows Kernel Information Disclosure Vulnerability

  An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability,…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Debian Ubuntu
  Sep 3, 2019
• Unscored —
  CVE-2018-13405 Public exploit

  The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 6, 2018
• Unscored —
  CVE-2018-9568

  In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escal…

  Google Android linux-raspi2 linux-hwe Android Debian Ubuntu
  Dec 6, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/articles/4329821
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1599161
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1655162
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1655904
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1660375
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1724389
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2696.json
• report
  https://access.redhat.com/security/cve/CVE-2018-9568
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-9568
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-9568
• report
  https://access.redhat.com/security/cve/CVE-2018-13405
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-13405
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-13405
• report
  https://access.redhat.com/security/cve/CVE-2018-16871
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-16871
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-16871
• report
  https://access.redhat.com/security/cve/CVE-2018-16884
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-16884
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-16884
• report
  https://access.redhat.com/security/cve/CVE-2019-1125
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-1125
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-1125