RHSA-2020:0374: Important: kernel security and bug fix update

First published: Tue Feb 04 2020(Updated: )

The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver (CVE-2019-14816)</li> <li> kernel: heap-based buffer overflow in mwifiex_process_country_ie() function in drivers/net/wireless/marvell/mwifiex/sta_ioctl.c (CVE-2019-14895)</li> <li> kernel: heap overflow in marvell/mwifiex/tdls.c (CVE-2019-14901)</li> <li> kernel: buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c (CVE-2019-17133)</li> <li> kernel: incomplete fix for race condition between mmget_not_zero()/get_task_mm() and core dumping in CVE-2019-11599 (CVE-2019-14898)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> [Azure][7.8] Include patch "PCI: hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it" (BZ#1766089)</li> <li> [Hyper-V][RHEL7.8] When accelerated networking is enabled on RedHat, network interface(eth0) moved to new network namespace does not obtain IP address. (BZ#1766093)</li> <li> [Azure][RHEL 7.6] hv_vmbus probe pass-through GPU card failed (BZ#1766097)</li> <li> SMB3: Do not error out on large file transfers if server responds with STATUS_INSUFFICIENT_RESOURCES (BZ#1767621)</li> <li> Since RHEL commit 5330f5d09820 high load can cause dm-multipath path failures (BZ#1770113)</li> <li> Hard lockup in free_one_page()-&gt;_raw_spin_lock() because sosreport command is reading from /proc/pagetypeinfo (BZ#1770732)</li> <li> patchset for x86/atomic: Fix smp_mb__{before,after}_atomic() (BZ#1772812)</li> <li> fix compat statfs64() returning EOVERFLOW for when _FILE_OFFSET_BITS=64 (BZ#1775678)</li> <li> Guest crash after load cpuidle-haltpoll driver (BZ#1776289)</li> <li> RHEL 7.7 long I/O stalls with bnx2fc from not masking off scope bits of retry delay value (BZ#1776290)</li> <li> Multiple "mv" processes hung on a gfs2 filesystem (BZ#1777297)</li> <li> Moving Egress IP will result in conntrack sessions being DESTROYED (BZ#1779564)</li> <li> core: backports from upstream (BZ#1780033)</li> <li> kernel BUG at arch/powerpc/platforms/pseries/lpar.c:482! (BZ#1780148)</li> <li> Race between tty_open() and flush_to_ldisc() using the tty_struct-&gt;driver_data field. (BZ#1780163)</li>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/severity
• agent/weakness
• agent/type
• agent/softwarecombine
• agent/first-publish-date
• agent/last-modified-date
• agent/title
• agent/remedy
• agent/references
• agent/tags
• agent/description
• agent/event
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2020:0374
• agent/software-canonical-lookup
• package-manager/redhat