Red Hat Security Advisory: kernel-alt security, bug fix, and enhancement update

Fixed packages 20

Vulnerabilities 3

• High 7.8
  CVE-2019-13272 Exploited Public exploit EPSS 52%

  In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proc…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 17, 2019

  KEV Dec 10, 2021
• Unscored —
  CVE-2019-5489 Public exploit

  The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe pag…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 7, 2019
• Unscored —
  CVE-2019-6974 Public exploit EPSS 17%

  In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Feb 15, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1664110
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1671913
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1730895
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2809.json
• report
  https://access.redhat.com/security/cve/CVE-2019-5489
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5489
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5489
• report
  https://access.redhat.com/security/cve/CVE-2019-6974
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-6974
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-6974
• report
  https://access.redhat.com/security/cve/CVE-2019-13272
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-13272
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-13272
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog