Red Hat Security Advisory: kernel-alt security and bug fix update

Fixed packages 19

Vulnerabilities 9

• High 8.8
  CVE-2019-14901 EPSS 16%

  A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip dr…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Nov 29, 2019
• High 8.0
  CVE-2019-14895

  A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Nov 29, 2019
• High 7.4
  CVE-2019-5108 EPSS 10%

  An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could expl…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Dec 23, 2019
• Unscored —
  CVE-2019-15031

  In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' proc…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 13, 2019
• Unscored —
  CVE-2019-15099

  drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplet…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 16, 2019
• Unscored —
  CVE-2019-15666

  An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in __xfrm_policy_unli…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 27, 2019
• Unscored —
  CVE-2019-19922

  kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows att…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 22, 2019
• Unscored —
  CVE-2019-20054

  In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 28, 2019
• Unscored —
  CVE-2019-20095

  mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handl…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 30, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1743560
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1747334
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1760063
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1773519
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1774870
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1789927
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1790063
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1791954
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1792512
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1493.json
• report
  https://access.redhat.com/security/cve/CVE-2019-5108
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5108
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5108
• report
  https://access.redhat.com/security/cve/CVE-2019-14895
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14895
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14895
• article
  https://www.openwall.com/lists/oss-security/2019/11/22/2
• report
  https://access.redhat.com/security/cve/CVE-2019-14901
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14901
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14901
• report
  https://access.redhat.com/security/cve/CVE-2019-15031
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-15031
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-15031
• report
  https://access.redhat.com/security/cve/CVE-2019-15099
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-15099
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-15099
• report
  https://access.redhat.com/security/cve/CVE-2019-15666
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-15666
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-15666
• report
  https://access.redhat.com/security/cve/CVE-2019-19922
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19922
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19922
• report
  https://access.redhat.com/security/cve/CVE-2019-20054
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-20054
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-20054
• report
  https://access.redhat.com/security/cve/CVE-2019-20095
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-20095
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-20095