RHSA-2019:2864: Important: kernel security update
Published Sep 23, 2019
·Updated
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host. (CVE-2019-14835)
Affected Software
56 affected componentsFixes available
redhat/kernel<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/bpftool<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-abi-whitelists<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-debug<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-debug-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-debug-devel<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-devel<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-doc<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-headers<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-tools<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-tools-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-tools-libs<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-tools-libs-devel<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/perf<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/perf-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/python-perf<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/python-perf-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-debug<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-debug-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-debug-devel<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-debuginfo-common-s390x<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-devel<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-headers<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-kdump<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-kdump-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-kdump-devel<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/perf<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/perf-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/python-perf<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/python-perf-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-bootwrapper<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-debuginfo-common-ppc64<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-tools<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-tools-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-tools-libs<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-tools-libs-devel<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-bootwrapper<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-debug<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-debug-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-debug-devel<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-debuginfo-common-ppc64le<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-devel<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-headers<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-tools<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-tools-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-tools-libs<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/kernel-tools-libs-devel<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/perf<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/perf-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/python-perf<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
redhat/python-perf-debuginfo<3.10.0-957.35.2.el7
3.10.0-957.35.2.el7
Remediation
Event History
Jun 4, 2026
Advisory Published
via Red Hat·03:32 PM
Data Sourced
via Red Hat·03:32 PM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of RHSA-2019:2864?
The severity of RHSA-2019:2864 is classified as important.
2
How do I fix RHSA-2019:2864?
To fix RHSA-2019:2864, update the affected packages to the version 3.10.0-957.35.2.el7 or later.
3
What software is affected by RHSA-2019:2864?
RHSA-2019:2864 affects the kernel and its related packages in the specified version.
4
Is a workaround available for RHSA-2019:2864?
There are no known workaround options for the vulnerability addressed in RHSA-2019:2864.
5
What type of vulnerability is described in RHSA-2019:2864?
RHSA-2019:2864 describes a buffer overflow vulnerability in the Linux kernel's vhost functionality.