RHSA-2020:4060 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 83

Release	Package	Fixed in
Red Hat · RHEL 7 enterprise_linux:7::client	bpftool	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	bpftool-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-abi-whitelists	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debug	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debug-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debug-devel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debuginfo-common-x86_64	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-devel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-doc	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools-libs	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools-libs-devel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	perf	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	perf-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	python-perf	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::client	python-perf-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	bpftool	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	bpftool-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-abi-whitelists	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debug	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debug-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debug-devel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debuginfo-common-x86_64	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-devel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-doc	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-tools	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-tools-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-tools-libs	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-tools-libs-devel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	perf	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	perf-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	python-perf	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	python-perf-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	bpftool	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	bpftool-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-abi-whitelists	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-bootwrapper	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debug	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debug-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debug-devel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo-common-ppc64	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo-common-ppc64le	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo-common-s390x	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo-common-x86_64	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-devel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-doc	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-kdump	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-kdump-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-kdump-devel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools-libs	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools-libs-devel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	perf	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	perf-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	python-perf	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::server	python-perf-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	bpftool	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	bpftool-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-abi-whitelists	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debug	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debug-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debug-devel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debuginfo-common-x86_64	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-devel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-doc	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools-libs	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools-libs-devel	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	perf	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	perf-debuginfo	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	python-perf	0:3.10.0-1160.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	python-perf-debuginfo	0:3.10.0-1160.el7

Vulnerabilities 46

High 7.5

CVE-2020-1749

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE t…

Linux kernel kernel linux-raspi2 linux-hwe Debian Ubuntu

Sep 9, 2020
Medium 6.5

CVE-2020-10690

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cd…

Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu

May 8, 2020
Medium 6.1

CVE-2019-19332

An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kerne…

Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

Jan 9, 2020
Medium 6.1

CVE-2020-10751

A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed …

The Linux Foundation Kernel linux-raspi2 linux-hwe Debian Ubuntu

May 26, 2020
Medium 5.8

CVE-2020-2732

A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virt…

Oracle Oracle Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Apr 8, 2020
Low 3.3

CVE-2020-10732

A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a loca…

Linux kernel kernel linux-raspi2 linux-hwe Debian Ubuntu

Jun 12, 2020
Unscored —

CVE-2017-18551

An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds w…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 19, 2019
Unscored —

CVE-2018-20836

An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 7, 2019
Unscored —

CVE-2019-12614

An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel throug…

linux-hwe linux-azure linux-riscv linux Debian Ubuntu

Jun 3, 2019
Unscored —

CVE-2019-15217

An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 19, 2019
Unscored —

CVE-2019-15807

In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander disco…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 29, 2019
Unscored —

CVE-2019-15917

An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 4, 2019
Unscored —

CVE-2019-16231

drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a N…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 11, 2019
Unscored —

CVE-2019-16233

drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 11, 2019
Unscored —

CVE-2019-16994

In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails t…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 30, 2019
Unscored —

CVE-2019-17053

ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Oct 1, 2019
Unscored —

CVE-2019-17055

base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does no…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Oct 1, 2019
Unscored —

CVE-2019-18808

A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allow…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 7, 2019
Unscored —

CVE-2019-19046

A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19055

A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19058

A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel throug…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19059

Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-in…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19062

A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows at…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19063

Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel thro…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 18, 2019
Unscored —

CVE-2019-19447 Public exploit

In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can le…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 8, 2019
Unscored —

CVE-2019-19523

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the dri…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 3, 2019
Unscored —

CVE-2019-19524

In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the dr…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 3, 2019
Unscored —

CVE-2019-19530

In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the dr…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 3, 2019
Unscored —

CVE-2019-19534

In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the driver…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 3, 2019
Unscored —

CVE-2019-19537

In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the US…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 3, 2019
Unscored —

CVE-2019-19767

The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_ex…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 12, 2019
Unscored —

CVE-2019-19807

In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CI…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 15, 2019
Unscored —

CVE-2019-20054

In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 28, 2019
Unscored —

CVE-2019-20095

mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handl…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 30, 2019
Unscored —

CVE-2019-20636

In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demon…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 8, 2020
Unscored —

CVE-2019-9454

In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead t…

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Sep 6, 2019
Unscored —

CVE-2019-9458

In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local e…

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Sep 6, 2019
Unscored —

CVE-2020-10742

A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to cras…

linux-raspi2 linux-azure linux-riscv linux-gcp Debian Ubuntu

Jun 2, 2021
Unscored —

CVE-2020-10942

In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which m…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 24, 2020
Unscored —

CVE-2020-11565

An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bo…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 6, 2020
Unscored —

CVE-2020-12770

An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failu…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 9, 2020
Unscored —

CVE-2020-12826

A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 12, 2020
Unscored —

CVE-2020-14305

An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking function…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 2, 2020
Unscored —

CVE-2020-8647

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/v…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 6, 2020
Unscored —

CVE-2020-8649

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drive…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 6, 2020
Unscored —

CVE-2020-9383

An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_r…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 25, 2020

References

article
https://access.redhat.com/security/updates/classification/#important
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index
article
https://access.redhat.com/articles/5442421
report
https://bugzilla.redhat.com/show_bug.cgi?id=1448750
report
https://bugzilla.redhat.com/show_bug.cgi?id=1699402
report
https://bugzilla.redhat.com/show_bug.cgi?id=1707796
report
https://bugzilla.redhat.com/show_bug.cgi?id=1718176
report
https://bugzilla.redhat.com/show_bug.cgi?id=1724345
report
https://bugzilla.redhat.com/show_bug.cgi?id=1745528
report
https://bugzilla.redhat.com/show_bug.cgi?id=1747216
report
https://bugzilla.redhat.com/show_bug.cgi?id=1757368
report
https://bugzilla.redhat.com/show_bug.cgi?id=1758242
report
https://bugzilla.redhat.com/show_bug.cgi?id=1758248
report
https://bugzilla.redhat.com/show_bug.cgi?id=1759681
report
https://bugzilla.redhat.com/show_bug.cgi?id=1760100
report
https://bugzilla.redhat.com/show_bug.cgi?id=1760310
report
https://bugzilla.redhat.com/show_bug.cgi?id=1760420
report
https://bugzilla.redhat.com/show_bug.cgi?id=1774988
report
https://bugzilla.redhat.com/show_bug.cgi?id=1775015
report
https://bugzilla.redhat.com/show_bug.cgi?id=1775021
report
https://bugzilla.redhat.com/show_bug.cgi?id=1775042
report
https://bugzilla.redhat.com/show_bug.cgi?id=1775047
report
https://bugzilla.redhat.com/show_bug.cgi?id=1775074
report
https://bugzilla.redhat.com/show_bug.cgi?id=1777239
report
https://bugzilla.redhat.com/show_bug.cgi?id=1777418
report
https://bugzilla.redhat.com/show_bug.cgi?id=1779594
report
https://bugzilla.redhat.com/show_bug.cgi?id=1781679
report
https://bugzilla.redhat.com/show_bug.cgi?id=1783434
report
https://bugzilla.redhat.com/show_bug.cgi?id=1783459
report
https://bugzilla.redhat.com/show_bug.cgi?id=1783518
report
https://bugzilla.redhat.com/show_bug.cgi?id=1783540
report
https://bugzilla.redhat.com/show_bug.cgi?id=1783554
report
https://bugzilla.redhat.com/show_bug.cgi?id=1783561
report
https://bugzilla.redhat.com/show_bug.cgi?id=1786078
report
https://bugzilla.redhat.com/show_bug.cgi?id=1786160
report
https://bugzilla.redhat.com/show_bug.cgi?id=1790063
report
https://bugzilla.redhat.com/show_bug.cgi?id=1791954
report
https://bugzilla.redhat.com/show_bug.cgi?id=1802555
report
https://bugzilla.redhat.com/show_bug.cgi?id=1802563

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 83

Vulnerabilities 46

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE t…

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cd…

An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kerne…

A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed …

A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virt…

A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a loca…

An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds w…

An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_…

An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel throug…

An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB…

In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander disco…

An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() …

drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a N…

drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a …

In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails t…

ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does…

base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does no…

A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allow…

A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through …

A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5…

A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel throug…

Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-in…

A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows at…

Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel thro…

In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can le…

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the dri…

In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the dr…

In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the dr…

In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the driver…

In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the US…

The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_ex…

In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CI…

In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, …

mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handl…

In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demon…

In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead t…

In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local e…

A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to cras…

In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which m…

An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bo…

An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failu…

A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in…

An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking function…

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/v…

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drive…

An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_r…

References