Red Hat Security Advisory: kernel-alt security and bug fix update

Fixed packages 19

Vulnerabilities 10

• Medium 5.9
  CVE-2020-10711

  A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occ…

  Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  May 22, 2020
• Unscored —
  CVE-2017-18551

  An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds w…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 19, 2019
• Unscored —
  CVE-2017-18595

  An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocate_trace_…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 4, 2019
• Unscored —
  CVE-2019-12614

  An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel throug…

  linux-hwe linux-azure linux-riscv linux Debian Ubuntu
  Jun 3, 2019
• Unscored —
  CVE-2019-15538

  An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially we…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 25, 2019
• Unscored —
  CVE-2019-19447 Public exploit

  In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can le…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 8, 2019
• Unscored —
  CVE-2019-19524

  In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the dr…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 3, 2019
• Unscored —
  CVE-2019-19768

  In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrac…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 12, 2019
• Unscored —
  CVE-2019-9454

  In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead t…

  linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
  Sep 6, 2019
• Unscored —
  CVE-2020-9383

  An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_r…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Feb 25, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1718176
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1746777
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1757368
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1758671
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1781679
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1783459
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1786164
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1810685
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1818818
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1825116
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2104.json
• report
  https://access.redhat.com/security/cve/CVE-2017-18551
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-18551
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-18551
• report
  https://access.redhat.com/security/cve/CVE-2017-18595
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-18595
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-18595
• report
  https://access.redhat.com/security/cve/CVE-2019-9454
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-9454
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-9454
• report
  https://access.redhat.com/security/cve/CVE-2019-12614
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-12614
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-12614
• report
  https://access.redhat.com/security/cve/CVE-2019-15538
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-15538
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-15538
• report
  https://access.redhat.com/security/cve/CVE-2019-19447
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19447
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19447
• article
  https://bugzilla.kernel.org/show_bug.cgi?id=205433
• article
  https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447
• report
  https://access.redhat.com/security/cve/CVE-2019-19524
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19524
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19524
• report
  https://access.redhat.com/security/cve/CVE-2019-19768
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19768
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19768
• report
  https://access.redhat.com/security/cve/CVE-2020-9383