RHSA-2020:5437 — Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 72

Release	Package	Fixed in
Red Hat · RHEL 7 enterprise_linux:7::client	bpftool	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	bpftool-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-abi-whitelists	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debug	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debug-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debug-devel	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debuginfo-common-x86_64	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-devel	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-doc	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools-libs	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools-libs-devel	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	perf	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	perf-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	python-perf	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	python-perf-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	bpftool-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debug-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debuginfo-common-x86_64	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-tools-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-tools-libs-devel	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	perf-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	python-perf-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	bpftool	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	bpftool-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-abi-whitelists	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-bootwrapper	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debug	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debug-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debug-devel	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo-common-ppc64	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo-common-ppc64le	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo-common-s390x	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo-common-x86_64	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-devel	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-doc	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-kdump	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-kdump-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-kdump-devel	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools-libs	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools-libs-devel	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	perf	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	perf-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	python-perf	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	python-perf-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	bpftool	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	bpftool-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-abi-whitelists	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debug	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debug-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debug-devel	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debuginfo-common-x86_64	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-devel	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-doc	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools-libs	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools-libs-devel	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	perf	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	perf-debuginfo	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	python-perf	0:3.10.0-1160.11.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	python-perf-debuginfo	0:3.10.0-1160.11.1.el7

Vulnerabilities 7

Medium 5.5

CVE-2020-14314

A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the wa…

Linux kernel kernel linux-raspi2 linux-hwe Debian Ubuntu

Sep 15, 2020
Medium 5.5

CVE-2020-14385

A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause a…

Linux kernel kernel linux-raspi2 linux-hwe Debian Ubuntu

Sep 15, 2020
Unscored —

CVE-2019-18282

The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka C…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jan 16, 2020
Unscored —

CVE-2020-10769

A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys in crypto/authenc.c in…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jun 26, 2020
Unscored —

CVE-2020-24394

In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem obj…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 19, 2020
Unscored —

CVE-2020-25212

A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt m…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 9, 2020
Unscored —

CVE-2020-25643

A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read ov…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Oct 6, 2020

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=1708775
report
https://bugzilla.redhat.com/show_bug.cgi?id=1796360
report
https://bugzilla.redhat.com/show_bug.cgi?id=1853922
report
https://bugzilla.redhat.com/show_bug.cgi?id=1869141
report
https://bugzilla.redhat.com/show_bug.cgi?id=1874800
report
https://bugzilla.redhat.com/show_bug.cgi?id=1877575
report
https://bugzilla.redhat.com/show_bug.cgi?id=1879981
report
https://bugzilla.redhat.com/show_bug.cgi?id=1886305
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5437.json
report
https://access.redhat.com/security/cve/CVE-2019-18282
advisory
https://www.cve.org/CVERecord?id=CVE-2019-18282
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-18282
report
https://access.redhat.com/security/cve/CVE-2020-10769
advisory
https://www.cve.org/CVERecord?id=CVE-2020-10769
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-10769
report
https://access.redhat.com/security/cve/CVE-2020-14314
advisory
https://www.cve.org/CVERecord?id=CVE-2020-14314
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-14314
article
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5872331b3d91820e14716632ebb56b1399b34fe1
article
https://lore.kernel.org/linux-ext4/f53e246b-647c-64bb-16ec-135383c70ad7@redhat.com/T/#u
report
https://access.redhat.com/security/cve/CVE-2020-14385
advisory
https://www.cve.org/CVERecord?id=CVE-2020-14385
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-14385
article
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f4020438fab05364018c91f7e02ebdd192085933
report
https://access.redhat.com/security/cve/CVE-2020-24394
advisory
https://www.cve.org/CVERecord?id=CVE-2020-24394
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-24394
report
https://access.redhat.com/security/cve/CVE-2020-25212
advisory
https://www.cve.org/CVERecord?id=CVE-2020-25212
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-25212
report
https://access.redhat.com/security/cve/CVE-2020-25643
advisory
https://www.cve.org/CVERecord?id=CVE-2020-25643
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-25643
article
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=66d42ed8b25b64eb63111a2b8582c5afc8bf1105

Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 72

Vulnerabilities 7

A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the wa…

A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause a…

The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka C…

A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys in crypto/authenc.c in…

In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem obj…

A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt m…

A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read ov…

References