RHSA-2020:0698: Important: kpatch-patch security update
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.Security Fix(es): kernel: Use-after-free in blkdrainqueue() function in block/blk-core.c (CVE-2018-20856) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:0698?
RHSA-2020:0698 is classified as important due to a use-after-free vulnerability in the Linux kernel.
How do I fix RHSA-2020:0698?
To fix RHSA-2020:0698, you should apply the latest kernel live patch updates for the package kpatch-patch.
Which versions are affected by RHSA-2020:0698?
RHSA-2020:0698 affects various versions of the kpatch-patch package prior to the specified remedies in the Red Hat advisory.
What is the underlying issue of RHSA-2020:0698?
The underlying issue of RHSA-2020:0698 is a use-after-free vulnerability in the __blk_drain_queue() function.
Is a system restart required after applying the fix for RHSA-2020:0698?
No, applying the fix for RHSA-2020:0698 through the kpatch-patch does not typically require a system restart.