RHSA-2020:2199: Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> kernel: use-after-free in blkaddtrace in kernel/trace/blktrace.c (CVE-2019-19768)</li> <li> Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic (CVE-2020-10711)</li> <li> Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation (CVE-2020-11884)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> [FJ8.1 Bug]: A system panic occurs when an I/O timeout occurs. (BZ#1787296)</li> <li> [i40e]BUG: unable to handle kernel NULL pointer dereference at 0000000000000029 (BZ#1802483)</li> <li> [OSP16] [offload] [mellanox] VF representors of 2nd nic of bond is NOT renamed as <PF><VFid> (BZ#1802484)</li> <li> The kernel crashes in nbdchecksocktype() due to stack corruption if the socket address family is AFINET6. (BZ#1807605)</li> <li> Hung kernel tasks with LPm16004B-L when fabric paths are returning (BZ#1807831)</li> <li> bitops: protect variables in setmaskbits() macro (kernel) (BZ#1809042)</li> <li> [RHEL8] blktests block/007 test failed (BZ#1812806)</li> <li> [RHEL8.2 Alpha] Server panics with NULL pointer dereference during boot in selinuxtasktoinode() (BZ#1812807)</li> <li> [RHEL8] Kernel panic on job cleanup, related to SySgetdents64 (BZ#1812808)</li> <li> [HPE 8.2 Bug] kernel ignores NMI from ilo (BZ#1816830)</li> <li> [RHEL8.2][Azure]Commits to resolve high network latency (BZ#1817944)</li> <li> cpu.share scheduling performance issue (BZ#1819908)</li> <li> [RHEL8] Scheduler - backport asymetrical and misfit enhancements (BZ#1821370)</li> <li> RHEL8.0 - powerpc/powernv: Enhance opal message read interface (BZ#1822205)</li> <li> SCSI updates for 8.2 (BZ#1822252)</li> Enhancement(s):<br><li> [RFE] Backport RCU dependecies for kernel-rt (rhel-rt-8.2.0) from stable (BZ#1826215)</li>
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:2199?
The severity of RHSA-2020:2199 is categorized as important due to the potential impact of the vulnerabilities that may allow for privilege escalation or denial of service.
What vulnerabilities are addressed in RHSA-2020:2199?
RHSA-2020:2199 addresses a use-after-free vulnerability in __blk_add_trace and a null pointer dereference in NetLabel while receiving CIPSO packets.
How do I fix RHSA-2020:2199?
To fix RHSA-2020:2199, you should update the affected kernel packages to version 4.18.0-147.13.2.el8_1 or later.
What packages are affected by RHSA-2020:2199?
RHSA-2020:2199 affects various kernel packages including kernel, kernel-core, and kernel-tools, among others.
Can I check if my system is vulnerable to RHSA-2020:2199?
You can check if your system is vulnerable to RHSA-2020:2199 by comparing the installed kernel version against the advised remediation version.