RHSA-2020:0179: Moderate: kernel security and bug fix update
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: kvm: guest userspace to guest kernel write (CVE-2018-10853) kernel: TLB flush happens too late on mremap (CVE-2018-18281) kernel: fix race condition between mmgetnotzero()/gettaskmm() and core dumping (CVE-2019-11599) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): RHEL 7.7 RC1 - Host crashes about 4.5 hours into switch port bounce test (BZ#1763623) [Azure][7.8] Include patch "PCI: hv: Avoid use of hvpcidev->pcislot after freeing it" (BZ#1766088) [Hyper-V][RHEL7.8] When accelerated networking is enabled on RedHat, network interface(eth0) moved to new network namespace does not obtain IP address. (BZ#1766092) [Azure][RHEL 7.6] hvvmbus probe pass-through GPU card failed (BZ#1766096) Since RHEL commit 5330f5d09820 high load can cause dm-multipath path failures (BZ#1770112) Hard lockup in freeonepage()->rawspinlock() because sosreport command is reading from /proc/pagetypeinfo (BZ#1770731) [ESXi][RHEL7]use-after-free of scsicmnd on VMWare virtual guest with vmwpvscsi and atapiix (BZ#1770737) fix compat statfs64() returning EOVERFLOW for when FILEOFFSETBITS=64 (BZ#1775677) Kernel experiences panic in updategrouppower() due to division error (BZ#1775681) Guest crash after load cpuidle-haltpoll driver (BZ#1776288) Issues with nova/cinder and attaching disks, /dev/disk/by-id missing some times (BZ#1776291)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:0179?
The severity of RHSA-2020:0179 is critical, as it addresses multiple vulnerabilities in the Linux kernel.
How do I fix RHSA-2020:0179?
To fix RHSA-2020:0179, you should update the affected kernel packages to version 3.10.0-957.43.1.el7 or later.
What vulnerabilities are fixed in RHSA-2020:0179?
RHSA-2020:0179 fixes vulnerabilities including CVE-2018-10853 and CVE-2018-18281 in the kernel.
Which systems are affected by RHSA-2020:0179?
Systems running outdated versions of Red Hat Enterprise Linux with the kernel package prior to 3.10.0-957.43.1.el7 are affected by RHSA-2020:0179.
Is a reboot required after applying the fix for RHSA-2020:0179?
Yes, a reboot is required to apply the kernel updates and ensure the vulnerabilities are effectively patched.