Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 43

Vulnerabilities 37

• High 7.5
  CVE-2018-16871

  A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacke…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  Jul 30, 2019
• High 7.5
  CVE-2020-1749

  A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE t…

  Linux kernel kernel linux-raspi2 linux-hwe Debian Ubuntu
  Sep 9, 2020
• High 7.4
  CVE-2019-5108 EPSS 10%

  An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could expl…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Dec 23, 2019
• Medium 6.5
  CVE-2020-10690

  There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cd…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  May 8, 2020
• Medium 5.5
  CVE-2021-33630

  NULL-ptr-deref in network sched

  NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with program files net/sched/sch_cbs.C. This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3.

  openEuler kernel linux-raspi2 linux-hwe Debian Ubuntu
  Jan 18, 2024
• Unscored —
  CVE-2019-10639

  The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address discl…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 5, 2019
• Unscored —
  CVE-2019-12819

  An issue was discovered in the Linux kernel before 5.0. The function __mdiobus_register() in drivers/net/phy/mdio_bus.c…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jun 14, 2019
• Unscored —
  CVE-2019-15090

  An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 15, 2019
• Unscored —
  CVE-2019-15099

  drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplet…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 16, 2019
• Unscored —
  CVE-2019-15221

  An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious US…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 19, 2019
• Unscored —
  CVE-2019-15223

  An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB…

  linux-hwe linux-azure linux linux-aws Ubuntu
  Aug 19, 2019
• Unscored —
  CVE-2019-16234

  drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return va…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 11, 2019
• Unscored —
  CVE-2019-16746 Public exploit EPSS 13%

  An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of v…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 24, 2019
• Unscored —
  CVE-2019-17053

  ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 1, 2019
• Unscored —
  CVE-2019-17055

  base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does no…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 1, 2019
• Unscored —
  CVE-2019-18282

  The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka C…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 16, 2020
• Unscored —
  CVE-2019-18805

  An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 7, 2019
• Unscored —
  CVE-2019-19045

  A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 18, 2019
• Unscored —
  CVE-2019-19047

  A memory leak in the mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the …

  linux-raspi2 linux-riscv linux linux-gke Debian Ubuntu
  Nov 18, 2019
• Unscored —
  CVE-2019-19055

  A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 18, 2019
• Unscored —
  CVE-2019-19057

  Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Lin…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 18, 2019
• Unscored —
  CVE-2019-19058

  A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel throug…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 18, 2019
• Unscored —
  CVE-2019-19059

  Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-in…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 18, 2019
• Unscored —
  CVE-2019-19065

  A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 18, 2019
• Unscored —
  CVE-2019-19067

  Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel before 5…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 18, 2019
• Unscored —
  CVE-2019-19073

  Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 18, 2019
• Unscored —
  CVE-2019-19074

  A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.1…

  linux-raspi2 linux-hwe linux-azure linux-gcp Debian Ubuntu
  Nov 18, 2019
• Unscored —
  CVE-2019-19077

  A memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in the Linux kernel thro…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 18, 2019
• Unscored —
  CVE-2019-19532

  In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB dev…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 3, 2019
• Unscored —
  CVE-2019-19534

  In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the driver…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 3, 2019
• Unscored —
  CVE-2019-19768

  In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrac…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 12, 2019
• Unscored —
  CVE-2019-19922

  kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows att…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 22, 2019
• Unscored —
  CVE-2019-8980

  A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cau…

  linux-raspi2 linux-hwe linux-azure linux-gcp Debian Ubuntu
  Feb 21, 2019
• Unscored —
  CVE-2020-7053

  In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a u…

  linux-hwe linux-azure linux-riscv linux-gcp Debian Ubuntu
  Jan 14, 2020
• Unscored —
  CVE-2022-50473

  cpufreq: Init completion before kobject_init_and_add()

  In the Linux kernel, the following vulnerability has been resolved: cpufreq: Init completion before kobject_init_and_add() In cpufreq_policy_alloc(), it will call uninitialed completion in cpufreq_sysfs_release() when kobject_init_and_add() fails. And that wi…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Oct 4, 2025
• Unscored —
  CVE-2023-53581

  net/mlx5e: Check for NOT_READY flag state after locking

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Check for NOT_READY flag state after locking Currently the check for NOT_READY flag is performed before obtaining the necessary lock. This opens a possibility for race condition wh…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Oct 4, 2025
• Unscored —
  CVE-2023-54064

  ipmi:ssif: Fix a memory leak when scanning for an adapter

  In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_info_find() sets info->adapter_name if the adapter info came from SMBIOS, as it's not set in that case. However…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 24, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1655162
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1679972
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1729933
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1738741
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1743526
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1743560
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1749633
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1749974
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1752765
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1757902
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1758242
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1758248
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1765547
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1767664
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1771430
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1771496
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1771691
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1774933
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1774937
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1775050
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1783540
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1786164
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1789594
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1792512
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1795049
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1803162
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1809833
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1769.json
• report
  https://access.redhat.com/security/cve/CVE-2018-16871
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-16871
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-16871
• report
  https://access.redhat.com/security/cve/CVE-2019-5108
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1789927
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5108
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5108
• report
  https://access.redhat.com/security/cve/CVE-2019-8980
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-8980