Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 41

Vulnerabilities 7

• High 8.0
  CVE-2019-14895

  A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Nov 29, 2019
• Unscored —
  CVE-2018-20856

  An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an __blk_drain_queue() use-aft…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 26, 2019
• Unscored —
  CVE-2018-20976

  An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 19, 2019
• Unscored —
  CVE-2019-11085

  Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  May 17, 2019
• Unscored —
  CVE-2019-11599 Public exploit

  The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma l…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Apr 29, 2019
• Unscored —
  CVE-2019-17133

  In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 4, 2019
• Unscored —
  CVE-2019-17666 Public exploit

  rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bou…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 17, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1705937
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1710405
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1738705
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1743547
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1763690
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1771909
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1774870
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0543.json
• report
  https://access.redhat.com/security/cve/CVE-2018-20856
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-20856
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-20856
• report
  https://access.redhat.com/security/cve/CVE-2018-20976
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-20976
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-20976
• report
  https://access.redhat.com/security/cve/CVE-2019-11085
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11085
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11085
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00249.html
• report
  https://access.redhat.com/security/cve/CVE-2019-11599
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11599
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11599
• report
  https://access.redhat.com/security/cve/CVE-2019-14895
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14895
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14895
• article
  https://www.openwall.com/lists/oss-security/2019/11/22/2
• report
  https://access.redhat.com/security/cve/CVE-2019-17133
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-17133
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-17133
• report
  https://access.redhat.com/security/cve/CVE-2019-17666
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-17666
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-17666
• article
  https://arstechnica.com/information-technology/2019/10/unpatched-linux-flaw-may-let-attackers-crash-or-compromise-nearby-devices/
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c55dedb795be8ec0cf488f98c03a1c2176f7fb1