Red Hat Security Advisory: kernel security and enhancement update

Fixed packages 17

Vulnerabilities 5

• High 8.0
  CVE-2019-14895

  A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Nov 29, 2019
• Medium 5.5
  CVE-2019-14816

  There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Li…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 20, 2019
• Unscored —
  CVE-2018-20976

  An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 19, 2019
• Unscored —
  CVE-2019-17133

  In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 4, 2019
• Unscored —
  CVE-2019-17666 Public exploit

  rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bou…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 17, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1743547
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1744149
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1763690
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1771909
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1774870
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0661.json
• report
  https://access.redhat.com/security/cve/CVE-2018-20976
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-20976
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-20976
• report
  https://access.redhat.com/security/cve/CVE-2019-14816
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14816
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14816
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7caac62ed598a196d6ddf8d9c121e12e082cac3a
• report
  https://access.redhat.com/security/cve/CVE-2019-14895
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14895
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14895
• article
  https://www.openwall.com/lists/oss-security/2019/11/22/2
• report
  https://access.redhat.com/security/cve/CVE-2019-17133
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-17133
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-17133
• report
  https://access.redhat.com/security/cve/CVE-2019-17666
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-17666
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-17666
• article
  https://arstechnica.com/information-technology/2019/10/unpatched-linux-flaw-may-let-attackers-crash-or-compromise-nearby-devices/
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c55dedb795be8ec0cf488f98c03a1c2176f7fb1