Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 53

Vulnerabilities 5

• High 7.0
  CVE-2018-10853

  A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrs…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 11, 2018
• Unscored —
  CVE-2018-18281

  Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 30, 2018
• Unscored —
  CVE-2018-20856

  An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an __blk_drain_queue() use-aft…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 26, 2019
• Unscored —
  CVE-2019-11599 Public exploit

  The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma l…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Apr 29, 2019
• Unscored —
  CVE-2019-6974 Public exploit EPSS 17%

  In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Feb 15, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1589890
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1645121
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1671913
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1705937
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1738705
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0103.json
• report
  https://access.redhat.com/security/cve/CVE-2018-10853
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-10853
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-10853
• report
  https://access.redhat.com/security/cve/CVE-2018-18281
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-18281
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-18281
• report
  https://access.redhat.com/security/cve/CVE-2018-20856
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-20856
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-20856
• report
  https://access.redhat.com/security/cve/CVE-2019-6974
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-6974
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-6974
• report
  https://access.redhat.com/security/cve/CVE-2019-11599
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11599
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11599