RHSA-2019:3220: Important: kernel security and bug fix update

First published: Tue Oct 29 2019(Updated: )

The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> Kernel: vhost_net: infinite loop while receiving packets leads to DoS (CVE-2019-3900)</li> <li> hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB) (CVE-2019-9506)</li> <li> kernel: hw: Spectre SWAPGS gadget vulnerability (CVE-2019-1125)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> [mlx4] VXLAN over VLAN TCP segmentation (BZ#1734325)</li> <li> Race condition in /dev/sg due to missing synchronization causes corruption in RHV (BZ#1737378)</li> <li> [FJ7.6 Bug]: [REG] kernel: ipc: ipc_free should use kvfree (BZ#1740177)</li> <li> high update_cfs_rq_blocked_load contention (BZ#1740179)</li> <li> kvm: backport cpuidle-haltpoll driver (BZ#1740191)</li> <li> Growing unreclaimable slab memory (BZ#1741919)</li> <li> [Hyper-V]vPCI devices cannot allocate IRQs vectors in a Hyper-V VM with &gt; 240 vCPUs (i.e., when in x2APIC mode) (BZ#1743323)</li> <li> NFSv4.0 client sending a double CLOSE (leading to EIO application failure) (BZ#1744945)</li> <li> powerpc/pseries: Fix unitialized timer reset on migration / powerpc/pseries/mobility: Extend start/stop topology update scope (LPM) (BZ#1745441)</li> <li> ISST-LTE:PVM:Zeppelin :LPM: Failure logs and stack trace seen during LPM (POWER9/P9) (BZ#1745448)</li> <li> [LLNL 7.5 Bug] slab leak causing a crash when using kmem control group (BZ#1748237)</li> <li> [Azure] CRI-RDOS | [RHEL 7.8] Live migration only takes 10 seconds, but the VM was unavailable for 2 hours (BZ#1748238)</li> <li> Allows macvlan to operate correctly over the active-backup mode to support bonding events (BZ#1749291)</li> <li> debug kernel reports scheduling while atomic bug in EFI code (BZ#1755324)</li>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/severity
• agent/references
• agent/type
• agent/first-publish-date
• agent/last-modified-date
• agent/softwarecombine
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2019:3220
• agent/software-canonical-lookup
• agent/description
• agent/remedy
• agent/title
• agent/event
• agent/weakness
• agent/trending
• agent/tags
• agent/source
• package-manager/redhat