Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 25

Vulnerabilities 12

• High 8.8
  CVE-2019-14901 EPSS 16%

  A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip dr…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Nov 29, 2019
• High 7.6
  CVE-2019-9506 Public exploit

  Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation

  The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can dec…

  Bluetooth BR/EDR linux-raspi2 linux-hwe Debian Ubuntu
  Aug 14, 2019
• High 7.5
  CVE-2019-14821

  An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hy…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 19, 2019
• Medium 6.5
  CVE-2018-16884

  A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the s…

  [UNKNOWN] kernel: linux-raspi2 linux-hwe Debian Ubuntu
  Dec 18, 2018
• Medium 6.5
  CVE-2019-11135

  TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potent…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Nov 14, 2019
• Medium 6.3
  CVE-2019-3900

  An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while han…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Apr 25, 2019
• Medium 5.9
  CVE-2019-10126

  A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/ne…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jun 14, 2019
• Medium 5.5
  CVE-2019-14816

  There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Li…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 20, 2019
• Unscored —
  CVE-2018-12207

  Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may a…

  linux-raspi2 linux-hwe linux-azure linux-gcp Debian Ubuntu Alpine
  Nov 14, 2019
• Unscored —
  CVE-2019-0154

  Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 14, 2019
• Unscored —
  CVE-2019-0155

  Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Windows Debian Ubuntu
  Nov 14, 2019
• Unscored —
  CVE-2019-5489 Public exploit

  The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe pag…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 7, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/security/vulnerabilities/ifu-page-mce
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646768
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1660375
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1664110
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1698757
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1716992
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1724393
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1724398
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1727857
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1744149
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1746708
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1753062
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1773519
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0204.json
• report
  https://access.redhat.com/security/cve/CVE-2018-12207
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-12207
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-12207
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00210.html
• report
  https://access.redhat.com/security/cve/CVE-2018-16884
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-16884
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-16884
• report
  https://access.redhat.com/security/cve/CVE-2019-0154
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-0154
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-0154
• article
  https://access.redhat.com/solutions/i915-graphics
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00260.html
• report
  https://access.redhat.com/security/cve/CVE-2019-0155
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-0155
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-0155
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242.html
• report
  https://access.redhat.com/security/cve/CVE-2019-3900
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-3900
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-3900
• report
  https://access.redhat.com/security/cve/CVE-2019-5489
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5489
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5489
• report
  https://access.redhat.com/security/cve/CVE-2019-9506
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-9506