RHSA-2020:0036: Moderate: kernel security and bug fix update

First published: Tue Jan 07 2020(Updated: )

The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> kernel: Use-after-free in snd_pcm_info function in ALSA subsystem potentially leads to privilege escalation (CVE-2017-0861)</li> <li> kernel: Handling of might_cancel queueing is not properly pretected against race (CVE-2017-10661)</li> <li> kernel: kvm: guest userspace to guest kernel write (CVE-2018-10853)</li> <li> kernel: TLB flush happens too late on mremap (CVE-2018-18281)</li> <li> kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS (CVE-2019-11810)</li> <li> kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c (CVE-2019-11811)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> Hard lockup in free_one_page()-&gt;_raw_spin_lock() because sosreport command is reading from /proc/pagetypeinfo (BZ#1770730)</li>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/description
• agent/event
• agent/first-publish-date
• agent/last-modified-date
• agent/references
• agent/remedy
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/title
• agent/type
• agent/weakness
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2020:0036
• agent/software-canonical-lookup
• package-manager/redhat