RHSA-2020:2519: Important: kpatch-patch security update
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.Security Fix(es): Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic (CVE-2020-10711) kernel: use-after-free in blkaddtrace in kernel/trace/blktrace.c (CVE-2019-19768) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:2519?
The severity of RHSA-2020:2519 is classified as Important.
How do I fix RHSA-2020:2519?
To fix RHSA-2020:2519, update the kpatch-patch package to the latest version that is not affected by this vulnerability.
What vulnerability does RHSA-2020:2519 address?
RHSA-2020:2519 addresses a null pointer dereference vulnerability in the kernel's handling of CIPSO packets.
Which versions of kpatch-patch are affected by RHSA-2020:2519?
Versions of kpatch-patch prior to 3_10_0-1062-1-18.el7 are affected by RHSA-2020:2519.
Is there a workaround for RHSA-2020:2519?
There are no specific workarounds for RHSA-2020:2519; patching is the recommended solution.