RHSA-2020:1567 — Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Fixed packages 28

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-core	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-core	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-debuginfo	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-devel	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-kvm	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-modules	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-modules-extra	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debuginfo	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debuginfo-common-x86_64	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-devel	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-kvm	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-modules	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-modules-extra	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-core	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug-core	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug-debuginfo	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug-devel	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug-modules	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug-modules-extra	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debuginfo	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debuginfo-common-x86_64	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-devel	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-modules	0:4.18.0-193.rt13.51.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-modules-extra	0:4.18.0-193.rt13.51.el8

Vulnerabilities 33

High 7.5

CVE-2018-16871

A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacke…

Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu

Jul 30, 2019
High 7.5

CVE-2020-1749

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE t…

Linux kernel kernel linux-raspi2 linux-hwe Debian Ubuntu

Sep 9, 2020
High 7.4

CVE-2019-5108 EPSS 10%

An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could expl…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Dec 23, 2019
Medium 6.5

CVE-2020-10690

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cd…

Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu

May 8, 2020
Medium 5.5

CVE-2021-33630

NULL-ptr-deref in network sched

NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with program files net/sched/sch_cbs.C. This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3.

openEuler kernel linux-raspi2 linux-hwe Debian Ubuntu

Jan 18, 2024
Unscored —

CVE-2019-10639

The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address discl…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jul 5, 2019
Unscored —

CVE-2019-12819

An issue was discovered in the Linux kernel before 5.0. The function __mdiobus_register() in drivers/net/phy/mdio_bus.c…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jun 14, 2019
Unscored —

CVE-2019-15090

An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 15, 2019
Unscored —

CVE-2019-15099

drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplet…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 16, 2019
Unscored —

CVE-2019-15221

An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious US…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 19, 2019
Unscored —

CVE-2019-15223

An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB…

linux-hwe linux-azure linux linux-aws Ubuntu

Aug 19, 2019
Unscored —

CVE-2019-16234

drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return va…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 11, 2019
Unscored —

CVE-2019-17053

ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Oct 1, 2019
Unscored —

CVE-2019-17055

base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does no…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Oct 1, 2019
Unscored —

CVE-2019-18282

The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka C…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jan 16, 2020
Unscored —

CVE-2019-18805

An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 7, 2019
Unscored —

CVE-2019-19045

A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19047

A memory leak in the mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the …

linux-raspi2 linux-riscv linux linux-gke Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19055

A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19057

Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Lin…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19058

A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel throug…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19059

Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-in…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19065

A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19067

Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel before 5…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19073

Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19074

A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.1…

linux-raspi2 linux-hwe linux-azure linux-gcp Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19077

A memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in the Linux kernel thro…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19532

In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB dev…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 3, 2019
Unscored —

CVE-2019-19534

In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the driver…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 3, 2019
Unscored —

CVE-2019-19768

In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrac…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 12, 2019
Unscored —

CVE-2019-19922

kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows att…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 22, 2019
Unscored —

CVE-2019-8980

A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cau…

linux-raspi2 linux-hwe linux-azure linux-gcp Debian Ubuntu

Feb 21, 2019
Unscored —

CVE-2020-7053

In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a u…

linux-hwe linux-azure linux-riscv linux-gcp Debian Ubuntu

Jan 14, 2020

References

article
https://access.redhat.com/security/updates/classification/#important
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index
report
https://bugzilla.redhat.com/show_bug.cgi?id=1655162
report
https://bugzilla.redhat.com/show_bug.cgi?id=1679972
report
https://bugzilla.redhat.com/show_bug.cgi?id=1708716
report
https://bugzilla.redhat.com/show_bug.cgi?id=1712781
report
https://bugzilla.redhat.com/show_bug.cgi?id=1729933
report
https://bugzilla.redhat.com/show_bug.cgi?id=1743526
report
https://bugzilla.redhat.com/show_bug.cgi?id=1743560
report
https://bugzilla.redhat.com/show_bug.cgi?id=1749974
report
https://bugzilla.redhat.com/show_bug.cgi?id=1757165
report
https://bugzilla.redhat.com/show_bug.cgi?id=1758242
report
https://bugzilla.redhat.com/show_bug.cgi?id=1758248
report
https://bugzilla.redhat.com/show_bug.cgi?id=1768730
report
https://bugzilla.redhat.com/show_bug.cgi?id=1771496
report
https://bugzilla.redhat.com/show_bug.cgi?id=1772738
report
https://bugzilla.redhat.com/show_bug.cgi?id=1774933
report
https://bugzilla.redhat.com/show_bug.cgi?id=1774937
report
https://bugzilla.redhat.com/show_bug.cgi?id=1775050
report
https://bugzilla.redhat.com/show_bug.cgi?id=1783540
report
https://bugzilla.redhat.com/show_bug.cgi?id=1786164
report
https://bugzilla.redhat.com/show_bug.cgi?id=1788352
report
https://bugzilla.redhat.com/show_bug.cgi?id=1792512
report
https://bugzilla.redhat.com/show_bug.cgi?id=1796284
report
https://bugzilla.redhat.com/show_bug.cgi?id=1806871
report
https://bugzilla.redhat.com/show_bug.cgi?id=1809833
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1567.json
report
https://access.redhat.com/security/cve/CVE-2018-16871
advisory
https://www.cve.org/CVERecord?id=CVE-2018-16871
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-16871
report
https://access.redhat.com/security/cve/CVE-2019-5108
report
https://bugzilla.redhat.com/show_bug.cgi?id=1789927
advisory
https://www.cve.org/CVERecord?id=CVE-2019-5108
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-5108
report
https://access.redhat.com/security/cve/CVE-2019-8980
advisory
https://www.cve.org/CVERecord?id=CVE-2019-8980
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-8980
report
https://access.redhat.com/security/cve/CVE-2019-10639
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10639

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Fixed packages 28

Vulnerabilities 33

A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacke…

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE t…

An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could expl…

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cd…

NULL-ptr-deref in network sched

The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address discl…

An issue was discovered in the Linux kernel before 5.0. The function __mdiobus_register() in drivers/net/phy/mdio_bus.c…

An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of …

drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplet…

An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious US…

An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB…

drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return va…

ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does…

base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does no…

The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka C…

An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.…

A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the …

A memory leak in the mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the …

A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5…

Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Lin…

A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel throug…

Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-in…

A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows …

Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel before 5…

Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a …

A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.1…

A memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in the Linux kernel thro…

In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB dev…

In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the driver…

In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrac…

kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows att…

A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cau…

In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a u…

References