RHSA-2019:2703: Important: kernel security and bug fix update

First published: Tue Sep 10 2019(Updated: )

The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c (CVE-2019-3846)</li> <li> Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS (CVE-2019-3887)</li> <li> kernel: brcmfmac heap buffer overflow in brcmf_wowl_nd_results (CVE-2019-9500)</li> <li> kernel: Count overflow in FUSE request leading to use-after-free issues. (CVE-2019-11487)</li> <li> kernel: ppc: unrelated processes being able to read/write to each other's virtual memory (CVE-2019-12817)</li> <li> kernel: Use-after-free in sound/usb/card.c:usb_audio_probe() (CVE-2018-19824)</li> <li> kernel: brcmfmac frame validation bypass (CVE-2019-9503)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> [DELL EMC 8.0 BUG]: pciehp deadlock resulting in NVMe device not being recognized when hot plugged (BZ#1712261)</li> <li> Host crashed while try to boot a compatible guest attached huge page by"-object memory-backend-file *"[1G-P9] (BZ#1714758)</li> <li> Setting malformed authenc key will crash the system (BZ#1715335)</li> <li> BUG: memory allocation failure in inode_doinit_with_dentry()/context_to_sid() (BZ#1717780)</li> <li> [HPEMC 8.1 BUG] Protect against concurrent calls into UV BIOS (BZ#1724534)</li> <li> PHC jumping on I350 (igb) (BZ#1726352)</li> <li> aarch64 kernel missing vulnerabilities status files (BZ#1726353)</li> <li> BUG: KASAN: use-after-free in skb_release_data() (BZ#1726354)</li> <li> [RHEL8][PANIC][aarch64] kernel panic when loading the dme1737 module (BZ#1726355)</li> <li> [RHEL8] [aarch64] Changes for BZ1672997 break kaslr (BZ#1726357)</li> <li> Network fails to come up when booting with kernel 3.10.0-862.el7.x86_64, several hung tasks can be seen in logs. (BZ#1726358)</li> <li> [Intel] 'cpupower frequency-set' produces unexpected results for some processors (BZ#1726360)</li> <li> HDMI/DP audio: ELD not updated on hotplug event (BZ#1726361)</li> <li> [mlx5_core] CX5 Adapter works not as expected when MTU is 9000, Unable to handle kernel paging request at virtual address 3ae0aafeff4b6b5a (BZ#1726372)</li> <li> [DELL 8.0 Bug] - hid-multitouch 0018:1FD2:8008.0001 ,lost function from S3 resume (BZ#1727098)</li> <li> [RHEL8.1 Pre Beta] [Power8] data corruption while returning from watchpoint exception handler (BZ#1733281)</li> <li> RHEL8.1 pre-Beta - cacheinfo code unsafe vs LPM (BZ#1733282)</li> <li> RHEL8.1 pre-Beta - [ZZ/Zeppelin] [kernel-4.18.0-100.el8.ppc64le] Hash MMU allows child to write parents process address space (BZ#1734689)</li>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/weakness
• agent/severity
• agent/type
• agent/softwarecombine
• agent/last-modified-date
• agent/first-publish-date
• agent/remedy
• agent/title
• agent/references
• agent/description
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2019:2703
• agent/software-canonical-lookup
• agent/event
• agent/tags
• agent/trending
• package-manager/redhat