Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 17

Vulnerabilities 7

• Medium 5.5
  CVE-2020-14314

  A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the wa…

  Linux kernel kernel linux-raspi2 linux-hwe Debian Ubuntu
  Sep 15, 2020
• Medium 5.5
  CVE-2020-14385

  A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause a…

  Linux kernel kernel linux-raspi2 linux-hwe Debian Ubuntu
  Sep 15, 2020
• Unscored —
  CVE-2019-18282

  The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka C…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 16, 2020
• Unscored —
  CVE-2020-10769

  A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys in crypto/authenc.c in…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jun 26, 2020
• Unscored —
  CVE-2020-24394

  In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem obj…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 19, 2020
• Unscored —
  CVE-2020-25212

  A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt m…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 9, 2020
• Unscored —
  CVE-2020-25643

  A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read ov…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 6, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1708775
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1796360
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1853922
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1869141
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1874800
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1877575
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1879981
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1888872
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5441.json
• report
  https://access.redhat.com/security/cve/CVE-2019-18282
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-18282
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-18282
• report
  https://access.redhat.com/security/cve/CVE-2020-10769
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-10769
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-10769
• report
  https://access.redhat.com/security/cve/CVE-2020-14314
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14314
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14314
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5872331b3d91820e14716632ebb56b1399b34fe1
• article
  https://lore.kernel.org/linux-ext4/f53e246b-647c-64bb-16ec-135383c70ad7@redhat.com/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2020-14385
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14385
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14385
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f4020438fab05364018c91f7e02ebdd192085933
• report
  https://access.redhat.com/security/cve/CVE-2020-24394
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-24394
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-24394
• report
  https://access.redhat.com/security/cve/CVE-2020-25212
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25212
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25212
• report
  https://access.redhat.com/security/cve/CVE-2020-25643
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25643
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25643
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=66d42ed8b25b64eb63111a2b8582c5afc8bf1105