Red Hat Security Advisory: kernel security update

Fixed packages 25

Vulnerabilities 2

• High 8.0
  CVE-2019-14895

  A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Nov 29, 2019
• Unscored —
  CVE-2019-17666 Public exploit

  rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bou…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 17, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1763690
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1774870
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0831.json
• report
  https://access.redhat.com/security/cve/CVE-2019-14895
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14895
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14895
• article
  https://www.openwall.com/lists/oss-security/2019/11/22/2
• report
  https://access.redhat.com/security/cve/CVE-2019-17666
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-17666
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-17666
• article
  https://arstechnica.com/information-technology/2019/10/unpatched-linux-flaw-may-let-attackers-crash-or-compromise-nearby-devices/
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c55dedb795be8ec0cf488f98c03a1c2176f7fb1