RHSA-2019:2862: Important: kernel-alt security update
Published Sep 23, 2019
·Updated
The kernel-alt packages provide the Linux kernel version 4.x.Security Fix(es): A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host. (CVE-2019-14835)
Affected Software
51 affected componentsFixes available
redhat/kernel-alt<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/kernel-abi-whitelists<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-debug<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/kernel-debug-debuginfo<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/kernel-debug-devel<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/kernel-debuginfo<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/kernel-debuginfo-common-aarch64<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/kernel-devel<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/kernel-doc<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-headers<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/kernel-tools<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/kernel-tools-debuginfo<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/kernel-tools-libs<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/kernel-tools-libs-devel<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/perf<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/perf-debuginfo<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/python-perf<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/python-perf-debuginfo<4.14.0-115.13.1.el7a.aa
4.14.0-115.13.1.el7a.aa
redhat/kernel<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-bootwrapper<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-debug<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-debug-debuginfo<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-debug-devel<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-debuginfo<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-debuginfo-common-ppc64le<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-devel<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-headers<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-tools<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-tools-debuginfo<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-tools-libs<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-tools-libs-devel<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/perf<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/perf-debuginfo<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/python-perf<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/python-perf-debuginfo<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-debug<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-debug-debuginfo<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-debug-devel<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-debuginfo<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-debuginfo-common-s390x<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-devel<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-headers<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-kdump<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-kdump-debuginfo<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/kernel-kdump-devel<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/perf<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/perf-debuginfo<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/python-perf<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
redhat/python-perf-debuginfo<4.14.0-115.13.1.el7a
4.14.0-115.13.1.el7a
Remediation
Event History
Sep 23, 2019
Advisory Published
via Red Hat·12:00 AM
Frequently Asked Questions
1
What is the severity of RHSA-2019:2862?
The severity of RHSA-2019:2862 is classified as important.
2
How do I fix RHSA-2019:2862?
To fix RHSA-2019:2862, update the affected kernel-alt and kernel packages to version 4.14.0-115.13.1.el7a.
3
What vulnerability does RHSA-2019:2862 address?
RHSA-2019:2862 addresses a buffer overflow vulnerability in the Linux kernel's vhost functionality.
4
What systems are affected by RHSA-2019:2862?
RHSA-2019:2862 affects systems running specific versions of the RHEL kernel-alt and related kernel packages.
5
Is there a workaround for RHSA-2019:2862?
There is no official workaround for RHSA-2019:2862; applying the recommended updates is the only solution.