Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 32

Vulnerabilities 8

• High 8.8
  CVE-2019-14901 EPSS 16%

  A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip dr…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Nov 29, 2019
• High 8.0
  CVE-2019-14895

  A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Nov 29, 2019
• High 7.8
  CVE-2019-14815

  A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marv…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Nov 25, 2019
• High 7.0
  CVE-2019-14898

  The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw…

  Linux kernel kernel linux-azure linux-hwe-edge Ubuntu
  May 8, 2020
• Medium 5.5
  CVE-2019-14814

  There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 20, 2019
• Medium 5.5
  CVE-2019-14816

  There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Li…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 20, 2019
• Medium 5.5
  CVE-2019-19338

  A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel C…

  [UNKNOWN] Linux Kernel linux-azure linux-hwe-edge Linux Ubuntu
  Jul 13, 2020
• Unscored —
  CVE-2019-17666 Public exploit

  rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bou…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 17, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1744130
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1744137
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1744149
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1763690
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1773519
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1774671
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1774870
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1781514
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0328.json
• report
  https://access.redhat.com/security/cve/CVE-2019-14814
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14814
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14814
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7caac62ed598a196d6ddf8d9c121e12e082cac3a
• report
  https://access.redhat.com/security/cve/CVE-2019-14815
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14815
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14815
• report
  https://access.redhat.com/security/cve/CVE-2019-14816
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14816
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14816
• report
  https://access.redhat.com/security/cve/CVE-2019-14895
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14895
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14895
• article
  https://www.openwall.com/lists/oss-security/2019/11/22/2
• report
  https://access.redhat.com/security/cve/CVE-2019-14898
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14898
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14898
• article
  https://bugs.chromium.org/p/project-zero/issues/detail?id=1790
• article
  https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114
• article
  https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37
• article
  https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10
• report
  https://access.redhat.com/security/cve/CVE-2019-14901
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14901
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14901
• report
  https://access.redhat.com/security/cve/CVE-2019-17666
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-17666
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-17666
• article
  https://arstechnica.com/information-technology/2019/10/unpatched-linux-flaw-may-let-attackers-crash-or-compromise-nearby-devices/
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c55dedb795be8ec0cf488f98c03a1c2176f7fb1