RHSA-2020:3545: Moderate: kernel-alt security and bug fix update
The kernel-alt packages provide the Linux kernel version 4.x.Security Fix(es): kernel: Denial Of Service in the ipmibmcregister() function in drivers/char/ipmi/ipmimsghandler.c (CVE-2019-19046) kernel: Buffer over-read in cryptoauthencextractkeys() when a payload longer than 4 bytes is not aligned. (CVE-2020-10769) kernel: sync of excessive duration via an XFS v5 image with crafted metadata (CVE-2020-12655) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): list corruption in iscsiqueuecommand (BZ#1839622)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:3545?
The severity of RHSA-2020:3545 is generally considered to be critical due to significant security vulnerabilities in the Linux kernel.
How do I fix RHSA-2020:3545?
To fix RHSA-2020:3545, you should update the kernel-alt packages to version 4.14.0-115.29.1.el7a or newer.
What vulnerabilities are addressed by RHSA-2020:3545?
RHSA-2020:3545 addresses vulnerabilities including a Denial Of Service in the __ipmi_bmc_register() function and a buffer over-read in crypto_authenc_extractkeys().
Which systems are affected by RHSA-2020:3545?
RHSA-2020:3545 affects any system running the vulnerable kernel-alt packages from Red Hat.
Is there a workaround for RHSA-2020:3545?
There is no recommended workaround; the best approach is to apply the latest updates for the kernel.