Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 43

Vulnerabilities 8

• High 7.8
  CVE-2018-10902

  It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 21, 2018
• Medium 6.3
  CVE-2019-3900

  An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while han…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Apr 25, 2019
• Unscored —
  CVE-2017-18208

  The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 1, 2018
• Unscored —
  CVE-2018-18559

  In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 22, 2018
• Unscored —
  CVE-2018-9568

  In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escal…

  Google Android linux-raspi2 linux-hwe Android Debian Ubuntu
  Dec 6, 2018
• Unscored —
  CVE-2019-5489 Public exploit

  The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe pag…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 7, 2019
• Unscored —
  CVE-2019-6974 Public exploit EPSS 17%

  In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Feb 15, 2019
• Unscored —
  CVE-2019-7221

  The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 17, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1551565
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1590720
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641878
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1655904
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1664110
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1671904
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1671913
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1698757
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3967.json
• report
  https://access.redhat.com/security/cve/CVE-2017-18208
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-18208
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-18208
• article
  https://lwn.net/Articles/618064/
• article
  https://www.kernel.org/doc/Documentation/filesystems/dax.txt
• report
  https://access.redhat.com/security/cve/CVE-2018-9568
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-9568
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-9568
• report
  https://access.redhat.com/security/cve/CVE-2018-10902
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-10902
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-10902
• report
  https://access.redhat.com/security/cve/CVE-2018-18559
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-18559
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-18559
• article
  https://blogs.securiteam.com/index.php/archives/3731
• report
  https://access.redhat.com/security/cve/CVE-2019-3900
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-3900
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-3900
• report
  https://access.redhat.com/security/cve/CVE-2019-5489
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5489
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5489
• report
  https://access.redhat.com/security/cve/CVE-2019-6974
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-6974
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-6974
• report
  https://access.redhat.com/security/cve/CVE-2019-7221
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-7221
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-7221