Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 56

Vulnerabilities 6

• Medium 6.3
  CVE-2019-3900

  An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while han…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Apr 25, 2019
• Unscored —
  CVE-2017-10661 Public exploit EPSS 13%

  Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a deni…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Aug 19, 2017
• Unscored —
  CVE-2017-18208

  The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 1, 2018
• Unscored —
  CVE-2019-11811

  An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc…

  linux-hwe linux-azure linux linux Debian Ubuntu
  May 7, 2019
• Unscored —
  CVE-2019-5489 Public exploit

  The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe pag…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 7, 2019
• Unscored —
  CVE-2019-7221

  The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 17, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1481136
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1551565
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1664110
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1671904
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1698757
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1709180
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4058.json
• report
  https://access.redhat.com/security/cve/CVE-2017-10661
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-10661
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-10661
• report
  https://access.redhat.com/security/cve/CVE-2017-18208
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-18208
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-18208
• article
  https://lwn.net/Articles/618064/
• article
  https://www.kernel.org/doc/Documentation/filesystems/dax.txt
• report
  https://access.redhat.com/security/cve/CVE-2019-3900
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-3900
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-3900
• report
  https://access.redhat.com/security/cve/CVE-2019-5489
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5489
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5489
• report
  https://access.redhat.com/security/cve/CVE-2019-7221
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-7221
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-7221
• report
  https://access.redhat.com/security/cve/CVE-2019-11811
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11811
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11811