Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 17

Vulnerabilities 5

• High 8.8
  CVE-2019-14901 EPSS 16%

  A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip dr…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Nov 29, 2019
• High 8.0
  CVE-2019-14895

  A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Nov 29, 2019
• High 7.0
  CVE-2019-14898

  The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw…

  Linux kernel kernel linux-azure linux-hwe-edge Ubuntu
  May 8, 2020
• Medium 5.5
  CVE-2019-14816

  There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Li…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 20, 2019
• Unscored —
  CVE-2019-17133

  In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 4, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1744149
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1771909
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1773519
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1774671
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1774870
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1781157
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0375.json
• report
  https://access.redhat.com/security/cve/CVE-2019-14816
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14816
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14816
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7caac62ed598a196d6ddf8d9c121e12e082cac3a
• report
  https://access.redhat.com/security/cve/CVE-2019-14895
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14895
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14895
• article
  https://www.openwall.com/lists/oss-security/2019/11/22/2
• report
  https://access.redhat.com/security/cve/CVE-2019-14898
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14898
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14898
• article
  https://bugs.chromium.org/p/project-zero/issues/detail?id=1790
• article
  https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114
• article
  https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37
• article
  https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10
• report
  https://access.redhat.com/security/cve/CVE-2019-14901
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14901
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14901
• report
  https://access.redhat.com/security/cve/CVE-2019-17133
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-17133
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-17133