RHSA-2019:2827: Important: kernel security update
Published Sep 20, 2019
·Updated
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host. (CVE-2019-14835)
Affected Software
105 affected componentsFixes available
redhat/kernel<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/bpftool<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/bpftool-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-abi-whitelists<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-core<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-cross-headers<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug-core<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug-devel<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug-modules<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug-modules-extra<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-devel<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-doc<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-headers<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-modules<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-modules-extra<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-tools<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-tools-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-tools-libs<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/perf<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/perf-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/python3-perf<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/python3-perf-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/bpftool<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/bpftool-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-core<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-cross-headers<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug-core<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug-devel<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug-modules<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug-modules-extra<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debuginfo-common-s390x<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-devel<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-headers<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-modules<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-modules-extra<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-tools<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-tools-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-zfcpdump<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-zfcpdump-core<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-zfcpdump-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-zfcpdump-devel<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-zfcpdump-modules<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-zfcpdump-modules-extra<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/perf<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/perf-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/python3-perf<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/python3-perf-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/bpftool<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/bpftool-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-core<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-cross-headers<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug-core<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug-devel<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug-modules<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debug-modules-extra<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-debuginfo-common-ppc64le<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-devel<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-headers<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-modules<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-modules-extra<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-tools<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-tools-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-tools-libs<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/perf<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/perf-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/python3-perf<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/python3-perf-debuginfo<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/bpftool<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/bpftool-debuginfo<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-core<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-cross-headers<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-debug<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-debug-core<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-debug-debuginfo<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-debug-devel<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-debug-modules<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-debug-modules-extra<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-debuginfo<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-debuginfo-common-aarch64<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-devel<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-headers<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-modules<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-modules-extra<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-tools<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-tools-debuginfo<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-tools-libs<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/perf<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/perf-debuginfo<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/python3-perf<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/python3-perf-debuginfo<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
redhat/kernel-tools-libs-devel<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-tools-libs-devel<4.18.0-80.11.2.el8_0
4.18.0-80.11.2.el8_0
redhat/kernel-tools-libs-devel<4.18.0-80.11.2.el8_0.aa
4.18.0-80.11.2.el8_0.aa
Remediation
Event History
Jan 2, 2025
Advisory Published
via Red Hat·01:38 AM
Frequently Asked Questions
1
What is the severity of RHSA-2019:2827?
The severity of RHSA-2019:2827 is classified as important due to the buffer overflow vulnerability.
2
How do I fix RHSA-2019:2827?
To fix RHSA-2019:2827, you need to update the kernel packages to version 4.18.0-80.11.2.el8_0 or higher.
3
Which Linux kernel packages are affected by RHSA-2019:2827?
RHSA-2019:2827 affects various kernel packages including kernel, kernel-core, kernel-debug, and bpftool among others.
4
Is there a workaround for RHSA-2019:2827 before applying the fix?
There are no known workarounds for RHSA-2019:2827 other than applying the provided updates.
5
What type of vulnerability does RHSA-2019:2827 address?
RHSA-2019:2827 addresses a buffer overflow vulnerability in the Linux kernel's vhost functionality.