Red Hat Security Advisory: kernel-alt security and bug fix update

Fixed packages 19

Vulnerabilities 8

• High 7.5
  CVE-2018-16871

  A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacke…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Jul 30, 2019
• Unscored —
  CVE-2019-11884

  The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to o…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 10, 2019
• Unscored —
  CVE-2019-15030

  In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' proc…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 13, 2019
• Unscored —
  CVE-2019-15916

  An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/co…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 4, 2019
• Unscored —
  CVE-2019-17666 Public exploit

  rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bou…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 17, 2019
• Unscored —
  CVE-2019-18805

  An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 7, 2019
• Unscored —
  CVE-2019-3459

  A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 11, 2019
• Unscored —
  CVE-2019-3460

  A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 11, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1655162
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1663176
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1663179
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1709837
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1750813
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1759313
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1763690
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1771496
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0740.json
• report
  https://access.redhat.com/security/cve/CVE-2018-16871
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-16871
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-16871
• report
  https://access.redhat.com/security/cve/CVE-2019-3459
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-3459
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-3459
• report
  https://access.redhat.com/security/cve/CVE-2019-3460
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-3460
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-3460
• report
  https://access.redhat.com/security/cve/CVE-2019-11884
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11884
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11884
• report
  https://access.redhat.com/security/cve/CVE-2019-15030
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-15030
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-15030
• report
  https://access.redhat.com/security/cve/CVE-2019-15916
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-15916
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-15916
• report
  https://access.redhat.com/security/cve/CVE-2019-17666
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-17666
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-17666
• article
  https://arstechnica.com/information-technology/2019/10/unpatched-linux-flaw-may-let-attackers-crash-or-compromise-nearby-devices/
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c55dedb795be8ec0cf488f98c03a1c2176f7fb1
• report
  https://access.redhat.com/security/cve/CVE-2019-18805
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-18805
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-18805