RHSA-2019:1971: Important: kernel-rt security and bug fix update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.Security Fix(es): kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation (CVE-2019-11085) kernel: DMA attack using peripheral devices (Thunderclap) (BZ#1690716) kernel: infinite loop in updateblockedaverages() in kernel/sched/fair.c leading to denial of service (CVE-2018-20784) kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraidsasbase.c leading to DoS (CVE-2019-11810) kernel: use-after-free in drivers/char/ipmi/ipmisiintf.c, ipmisimemio.c, ipmisiportio.c (CVE-2019-11811) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): kernel-rt: update to the RHEL8.0.z batch#2 source tree (BZ#1717516)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2019:1971?
The severity of RHSA-2019:1971 is classified as important due to a privilege escalation vulnerability.
How do I fix RHSA-2019:1971?
To fix RHSA-2019:1971, update to the kernel-rt packages version 4.18.0-80.7.1.rt9.153.el8_0 or later.
What systems are affected by RHSA-2019:1971?
RHSA-2019:1971 affects systems running kernel-rt versions up to 4.18.0-80.7.1.rt9.153.el8_0.
What does the vulnerability in RHSA-2019:1971 relate to?
The vulnerability in RHSA-2019:1971 relates to insufficient input validation in the kernel mode driver for Intel i915 graphics.
Is a reboot required after applying the fix for RHSA-2019:1971?
Yes, a reboot is typically required after applying the fix for RHSA-2019:1971 to ensure that the updated kernel is loaded.