RHSA-2020:2082: Important: kernel security and bug fix update
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: double free may be caused by the function allocatetracebuffer in the file kernel/trace/trace.c (CVE-2017-18595) kernel: use-after-free in blkaddtrace in kernel/trace/blktrace.c (CVE-2019-19768) Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic (CVE-2020-10711) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): Delay in RT task scheduled. Incorrect nrscheduled value. (BZ#1796262) ixgbevf interface goes down on hypervisor and causes outage (BZ#1796799) kernel: UAF in cdevput() when a PTP device is removed while its chardev is open (BZ#1798396) [HPEMC RHEL 7.7 RHEL 7.8 REGRESSION] kernel not populating numanod in /sys/devices... for PMEM (BZ#1801699) Unable to exclude files from auditing (BZ#1806430) DNAT'd packet is not unmangled upon reply on openshift node (BZ#1806447) top shows super high loads when tuned profile realtime-virtual-host is applied (BZ#1808030) [RHEL 7.9] mdraid devices do not autocorrect read errors on parity blocks (BZ#1810062) Observed a memory leak while using dm-multipath (BZ#1812937) RHEL7.8: megaraidsas: MSIx allocation fails in resume path (BZ#1813249) Backport: Guest microcode version mismatch on secondary processors (BZ#1814003) dm-multipath high load backport incorrect (BZ#1814537) qla2xxx: Urgent driver fix needed. Initiator does not relogin to target after receiving an explicit logout (BZ#1815596) Potential deadlock in iscsiifrx func (BZ#1817497) High iSCSI read latency resolved by 'tcp: implement coalescing on backlog queue' (BZ#1817499) kdump: crashkernel=xM,low is likely to fail when x is big enough (BZ#1817502) [RHEL7.8][Azure]Commits to resolve high network latency (BZ#1817935) netsched: remove a bogus warning in hfsc (BZ#1821262) NETDEV WATCHDOG: enp3s0 (r8169): transmit queue 0 timed out (BZ#1822548) BUG: unable to handle kernel NULL pointer dereference at fldump (BZ#1824548) [ Marvell 7.9] update qla2xxx driver with critical bug fixes (BZ#1827274)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:2082?
The severity of RHSA-2020:2082 is considered important due to the potential for exploitation of double free and use-after-free vulnerabilities.
How do I fix RHSA-2020:2082?
To fix RHSA-2020:2082, update the kernel and associated packages to version 3.10.0-1127.8.2.el7 or later.
What vulnerabilities are addressed in RHSA-2020:2082?
RHSA-2020:2082 addresses vulnerabilities including a double free vulnerability in allocate_trace_buffer and use-after-free conditions.
Which packages are affected by RHSA-2020:2082?
RHSA-2020:2082 affects several packages including kernel, kernel-debug, and bpftool for version 3.10.0-1127.8.2.el7.
Is there a workaround for RHSA-2020:2082 before patching?
While the best action is to patch, reducing exposure and limiting unnecessary services can serve as a temporary workaround for RHSA-2020:2082.