Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 72

Vulnerabilities 11

• Unscored —
  CVE-2019-19532

  In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB dev…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 3, 2019
• Unscored —
  CVE-2020-0427

  In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local i…

  linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
  Sep 17, 2020
• Unscored —
  CVE-2020-14351

  A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local att…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 3, 2020
• Unscored —
  CVE-2020-25211

  In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a loca…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 9, 2020
• Unscored —
  CVE-2020-25645

  A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypte…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 13, 2020
• Unscored —
  CVE-2020-25656

  A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGK…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 2, 2020
• Unscored —
  CVE-2020-25705 Public exploit

  A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an of…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 17, 2020
• Unscored —
  CVE-2020-28374

  In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SC…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 13, 2021
• Unscored —
  CVE-2020-29661 Public exploit

  A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allow…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 9, 2020
• Unscored —
  CVE-2020-7053

  In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a u…

  linux-hwe linux-azure linux-riscv linux-gcp Debian Ubuntu
  Jan 14, 2020
• Unscored —
  CVE-2021-20265

  A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 10, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1781821
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1795624
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1862849
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1877571
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1883988
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1888726
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1894579
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1899804
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1901064
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1906525
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1908827
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1916589
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1919893
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0856.json
• report
  https://access.redhat.com/security/cve/CVE-2019-19532
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19532
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19532
• report
  https://access.redhat.com/security/cve/CVE-2020-0427
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-0427
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-0427
• report
  https://access.redhat.com/security/cve/CVE-2020-7053
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-7053
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-7053
• report
  https://access.redhat.com/security/cve/CVE-2020-14351
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14351
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14351
• report
  https://access.redhat.com/security/cve/CVE-2020-25211
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25211
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25211
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1cc5ef91d2ff94d2bf2de3b3585423e8a1051cb6
• report
  https://access.redhat.com/security/cve/CVE-2020-25645
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25645
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25645
• report
  https://access.redhat.com/security/cve/CVE-2020-25656
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25656
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25656
• article
  https://lkml.org/lkml/2020/10/16/84
• article
  https://lkml.org/lkml/2020/10/29/528