Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 46

Vulnerabilities 9

• High 7.5
  CVE-2019-14821

  An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hy…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 19, 2019
• Medium 5.6
  CVE-2019-3901

  A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevan…

  The Linux Foundation Kernel linux-raspi2 linux-riscv Debian Ubuntu
  Apr 22, 2019
• Unscored —
  CVE-2018-20169

  An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Dec 17, 2018
• Unscored —
  CVE-2018-7191

  In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. Th…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 17, 2019
• Unscored —
  CVE-2019-11487

  The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Apr 23, 2019
• Unscored —
  CVE-2019-13233

  In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry beca…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 4, 2019
• Unscored —
  CVE-2019-15916

  An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/co…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 4, 2019
• Unscored —
  CVE-2019-18660

  The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 27, 2019
• Unscored —
  CVE-2020-12888

  The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 15, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/solutions/5142691
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1660385
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1701245
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1703063
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1716328
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1727756
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1746708
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1750813
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1777825
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1836244
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2851.json
• report
  https://access.redhat.com/security/cve/CVE-2018-7191
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-7191
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-7191
• report
  https://access.redhat.com/security/cve/CVE-2018-20169
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-20169
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-20169
• report
  https://access.redhat.com/security/cve/CVE-2019-3901
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-3901
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-3901
• report
  https://access.redhat.com/security/cve/CVE-2019-11487
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11487
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11487
• report
  https://access.redhat.com/security/cve/CVE-2019-13233
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-13233
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-13233
• report
  https://access.redhat.com/security/cve/CVE-2019-14821
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14821
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14821
• report
  https://access.redhat.com/security/cve/CVE-2019-15916
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-15916
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-15916
• report
  https://access.redhat.com/security/cve/CVE-2019-18660
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-18660
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-18660
• report
  https://access.redhat.com/security/cve/CVE-2020-12888
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-12888
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-12888