First published: Tue Sep 03 2019(Updated: )
The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> kernel: hw: Spectre SWAPGS gadget vulnerability (CVE-2019-1125)</li> <li> kernel: brcmfmac heap buffer overflow in brcmf_wowl_nd_results (CVE-2019-9500)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> [mlx4] VXLAN over VLAN TCP segmentation (BZ#1734333)</li> <li> Race condition in /dev/sg due to missing synchronization causes corruption in RHV (BZ#1737380)</li> <li> panic handing smb2_reconnect due to a use after free (BZ#1737382)</li> <li> NFSv4.1 client stuck in infinite loop when received NFS4ERR_SEQ_MISORDERED error (BZ#1739077)</li> <li> Backport TCP follow-up for small buffers (BZ#1739130)</li>
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/kernel | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/bpftool | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/bpftool-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-abi-whitelists | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-debug | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-debug-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-debug-devel | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-devel | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-doc | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-headers | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-tools | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-tools-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-tools-libs | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-tools-libs-devel | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/perf | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/perf-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/python-perf | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/python-perf-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/bpftool | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/bpftool-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-debug | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-debug-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-debug-devel | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-debuginfo-common-s390x | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-devel | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-headers | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-kdump | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-kdump-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-kdump-devel | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/perf | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/perf-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/python-perf | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/python-perf-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-bootwrapper | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-debuginfo-common-ppc64 | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-tools | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-tools-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-tools-libs | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-tools-libs-devel | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/bpftool | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/bpftool-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-bootwrapper | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-debug | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-debug-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-debug-devel | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-debuginfo-common-ppc64le | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-devel | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-headers | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-tools | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-tools-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-tools-libs | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/kernel-tools-libs-devel | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/perf | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/perf-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/python-perf | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
redhat/python-perf-debuginfo | <3.10.0-1062.1.1.el7 | 3.10.0-1062.1.1.el7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
RHSA-2019:2600 addresses the Spectre SWAPGS gadget vulnerability (CVE-2019-1125) and a heap buffer overflow in brcmfmac (CVE-2019-9500).
The severity of RHSA-2019:2600 is classified as critical due to the potential for remote code execution and data leakage.
To fix RHSA-2019:2600, upgrade to the kernel version 3.10.0-1062.1.1.el7 or later.
The affected packages include kernel, kernel-debug, bpftool, and several others listed in the advisory.
Yes, a reboot is required to apply the kernel updates from RHSA-2019:2600.