RHSA-2019:3220 — Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 46

Release	Package	Fixed in
Red Hat · RHEL 7 enterprise_linux:7::hypervisor	kernel-devel	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor	perf	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor	python-perf	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	bpftool	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	kernel	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	kernel-abi-whitelists	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	kernel-debug	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	kernel-debug-debuginfo	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	kernel-debug-devel	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	kernel-debuginfo	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	kernel-debuginfo-common-x86_64	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	kernel-devel	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	kernel-doc	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	kernel-tools	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	kernel-tools-debuginfo	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	kernel-tools-libs	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	kernel-tools-libs-devel	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	perf	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	perf-debuginfo	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	python-perf	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode	python-perf-debuginfo	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	bpftool	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-abi-whitelists	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-bootwrapper	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-debug	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-debug-debuginfo	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-debug-devel	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-debuginfo	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-debuginfo-common-ppc64	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-debuginfo-common-ppc64le	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-debuginfo-common-s390x	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-debuginfo-common-x86_64	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-devel	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-doc	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-kdump	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-kdump-debuginfo	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-kdump-devel	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-tools	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-tools-debuginfo	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-tools-libs	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	kernel-tools-libs-devel	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	perf	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	perf-debuginfo	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	python-perf	0:3.10.0-957.38.1.el7
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server	python-perf-debuginfo	0:3.10.0-957.38.1.el7

Vulnerabilities 3

High 7.6

CVE-2019-9506 Public exploit

Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can dec…

Bluetooth BR/EDR linux-raspi2 linux-hwe Debian Ubuntu

Aug 14, 2019
Medium 6.3

CVE-2019-3900

An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while han…

Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu

Apr 25, 2019
Medium 5.6

CVE-2019-1125 Public exploit

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability,…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Debian Ubuntu

Sep 3, 2019

References

article
https://access.redhat.com/security/updates/classification/#important
article
https://access.redhat.com/articles/4329821
report
https://bugzilla.redhat.com/show_bug.cgi?id=1698757
report
https://bugzilla.redhat.com/show_bug.cgi?id=1724389
report
https://bugzilla.redhat.com/show_bug.cgi?id=1727857
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3220.json
report
https://access.redhat.com/security/cve/CVE-2019-1125
advisory
https://www.cve.org/CVERecord?id=CVE-2019-1125
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-1125
report
https://access.redhat.com/security/cve/CVE-2019-3900
advisory
https://www.cve.org/CVERecord?id=CVE-2019-3900
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-3900
report
https://access.redhat.com/security/cve/CVE-2019-9506
advisory
https://www.cve.org/CVERecord?id=CVE-2019-9506
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-9506

Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 46

Vulnerabilities 3

Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation

An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while han…

Windows Kernel Information Disclosure Vulnerability

References