Red Hat Security Advisory: kernel security update

Fixed packages 49

Vulnerabilities 7

• Unscored —
  CVE-2017-18551

  An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds w…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 19, 2019
• Unscored —
  CVE-2018-20836

  An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 7, 2019
• Unscored —
  CVE-2019-19046

  A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 18, 2019
• Unscored —
  CVE-2019-19447 Public exploit

  In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can le…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 8, 2019
• Unscored —
  CVE-2019-20636

  In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demon…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Apr 8, 2020
• Unscored —
  CVE-2019-9454

  In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead t…

  linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
  Sep 6, 2019
• Unscored —
  CVE-2020-12770

  An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failu…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 9, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1707796
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1757368
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1774988
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1781679
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1818818
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1824059
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1834845
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5656.json
• report
  https://access.redhat.com/security/cve/CVE-2017-18551
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-18551
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-18551
• report
  https://access.redhat.com/security/cve/CVE-2018-20836
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-20836
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-20836
• report
  https://access.redhat.com/security/cve/CVE-2019-9454
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-9454
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-9454
• report
  https://access.redhat.com/security/cve/CVE-2019-19046
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19046
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19046
• report
  https://access.redhat.com/security/cve/CVE-2019-19447
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19447
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19447
• article
  https://bugzilla.kernel.org/show_bug.cgi?id=205433
• article
  https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447
• report
  https://access.redhat.com/security/cve/CVE-2019-20636
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-20636
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-20636
• report
  https://access.redhat.com/security/cve/CVE-2020-12770
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-12770
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-12770