Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 32

Vulnerabilities 26

• High 7.6
  CVE-2019-9506 Public exploit

  Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation

  The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can dec…

  Bluetooth BR/EDR linux-raspi2 linux-hwe Debian Ubuntu
  Aug 14, 2019
• High 7.5
  CVE-2019-14821

  An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hy…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 19, 2019
• Medium 6.5
  CVE-2018-16884

  A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the s…

  [UNKNOWN] kernel: linux-raspi2 linux-hwe Debian Ubuntu
  Dec 18, 2018
• Medium 6.3
  CVE-2019-3900

  An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while han…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Apr 25, 2019
• Medium 5.9
  CVE-2019-10126

  A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/ne…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jun 14, 2019
• Medium 5.3
  CVE-2019-3874

  The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use t…

  The Linux Foundation Kernel linux-raspi2 linux-hwe Debian Ubuntu
  Mar 25, 2019
• Medium 4.7
  CVE-2019-10207 Public exploit

  A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and ke…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Nov 25, 2019
• Medium 4.7
  CVE-2019-3882

  A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory…

  The Linux Foundation Kernel linux-raspi2 linux-hwe Debian Ubuntu
  Apr 24, 2019
• Unscored —
  CVE-2018-19854

  An issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related functions in crypto/crypto_u…

  linux-raspi2 linux-hwe linux-azure linux-gcp Debian Ubuntu
  Dec 4, 2018
• Unscored —
  CVE-2018-19985

  The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 17, 2019
• Unscored —
  CVE-2018-20169

  An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Dec 17, 2018
• Unscored —
  CVE-2019-10638

  In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jul 5, 2019
• Unscored —
  CVE-2019-11599 Public exploit

  The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma l…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Apr 29, 2019
• Unscored —
  CVE-2019-11833

  fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 15, 2019
• Unscored —
  CVE-2019-11884

  The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to o…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 10, 2019
• Unscored —
  CVE-2019-13233

  In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry beca…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 4, 2019
• Unscored —
  CVE-2019-15666

  An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in __xfrm_policy_unli…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 27, 2019
• Unscored —
  CVE-2019-15916

  An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/co…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 4, 2019
• Unscored —
  CVE-2019-15921

  An issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when idr_alloc() fails in genl_r…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 4, 2019
• Unscored —
  CVE-2019-15924

  An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 4, 2019
• Unscored —
  CVE-2019-16994

  In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails t…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 30, 2019
• Unscored —
  CVE-2019-3459

  A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 11, 2019
• Unscored —
  CVE-2019-3460

  A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 11, 2019
• Unscored —
  CVE-2019-5489 Public exploit

  The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe pag…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 7, 2019
• Unscored —
  CVE-2019-7222

  The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 17, 2019
• Unscored —
  CVE-2020-10720

  A flaw was found in the Linux kernel's implementation of GRO in versions before 5.2. This flaw allows an attacker with …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 3, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1656986
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1660375
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1660385
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1663176
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1663179
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1664110
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1666106
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1671930
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1678887
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1686373
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1689426
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1698757
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1700666
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1705937
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1709837
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1712072
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1716992
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1724657
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1727756
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1727857
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1728765
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1729931
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1733472
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1733874
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1743931
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1745646
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1746708
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1750813
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3309.json
• report
  https://access.redhat.com/security/cve/CVE-2018-16884
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-16884
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-16884
• report
  https://access.redhat.com/security/cve/CVE-2018-19854
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-19854
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-19854
• report
  https://access.redhat.com/security/cve/CVE-2018-19985
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-19985