RHSA-2020:4062: Important: kernel-rt security and bug fix update
First published: Tue Sep 29 2020(Updated: )
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.<br>Security Fix(es):<br><li> kernel: use-after-free in sound/core/timer.c (CVE-2019-19807)</li> <li> kernel: out of bounds write in function i2c_smbus_xfer_emulated in drivers/i2c/i2c-core-smbus.c (CVE-2017-18551)</li> <li> kernel: race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c leads to use-after-free (CVE-2018-20836)</li> <li> kernel: out of bounds write in i2c driver leads to local escalation of privilege (CVE-2019-9454)</li> <li> kernel: use after free due to race condition in the video driver leads to local privilege escalation (CVE-2019-9458)</li> Space precludes documenting all of the security fixes in this advisory. See the descriptions of the remaining security fixes in the related Knowledge Article:<br><a href="https://access.redhat.com/articles/5442481" target="_blank">https://access.redhat.com/articles/5442481</a> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel-rt | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt-debug | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt-debug-debuginfo | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt-debug-devel | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt-debuginfo | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt-devel | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt-doc | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt-trace | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt-trace-debuginfo | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt-trace-devel | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt-debug-kvm | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt-debug-kvm-debuginfo | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt-kvm | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt-kvm-debuginfo | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt-trace-kvm | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
| redhat/kernel-rt-trace-kvm-debuginfo | <3.10.0-1160.rt56.1131.el7 | 3.10.0-1160.rt56.1131.el7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=1427551
- https://bugzilla.redhat.com/show_bug.cgi?id=1707796
- https://bugzilla.redhat.com/show_bug.cgi?id=1745528
- https://bugzilla.redhat.com/show_bug.cgi?id=1747216
- https://bugzilla.redhat.com/show_bug.cgi?id=1757368
- https://bugzilla.redhat.com/show_bug.cgi?id=1758242
- https://bugzilla.redhat.com/show_bug.cgi?id=1758248
- https://bugzilla.redhat.com/show_bug.cgi?id=1759681
- https://bugzilla.redhat.com/show_bug.cgi?id=1760100
- https://bugzilla.redhat.com/show_bug.cgi?id=1760310
- https://bugzilla.redhat.com/show_bug.cgi?id=1760420
- https://bugzilla.redhat.com/show_bug.cgi?id=1774988
- https://bugzilla.redhat.com/show_bug.cgi?id=1775015
- https://bugzilla.redhat.com/show_bug.cgi?id=1775021
- https://bugzilla.redhat.com/show_bug.cgi?id=1775042
- https://bugzilla.redhat.com/show_bug.cgi?id=1775047
- https://bugzilla.redhat.com/show_bug.cgi?id=1775074
- https://bugzilla.redhat.com/show_bug.cgi?id=1777418
- https://bugzilla.redhat.com/show_bug.cgi?id=1779594
- https://bugzilla.redhat.com/show_bug.cgi?id=1781679
- https://bugzilla.redhat.com/show_bug.cgi?id=1783434
- https://bugzilla.redhat.com/show_bug.cgi?id=1783459
- https://bugzilla.redhat.com/show_bug.cgi?id=1783518
- https://bugzilla.redhat.com/show_bug.cgi?id=1783540
- https://bugzilla.redhat.com/show_bug.cgi?id=1783561
- https://bugzilla.redhat.com/show_bug.cgi?id=1786078
- https://bugzilla.redhat.com/show_bug.cgi?id=1786160
- https://bugzilla.redhat.com/show_bug.cgi?id=1788009
- https://bugzilla.redhat.com/show_bug.cgi?id=1790063
- https://bugzilla.redhat.com/show_bug.cgi?id=1791954
- https://bugzilla.redhat.com/show_bug.cgi?id=1802555
- https://bugzilla.redhat.com/show_bug.cgi?id=1802563
- https://bugzilla.redhat.com/show_bug.cgi?id=1805135
- https://bugzilla.redhat.com/show_bug.cgi?id=1809833
- https://bugzilla.redhat.com/show_bug.cgi?id=1810685
- https://bugzilla.redhat.com/show_bug.cgi?id=1817141
- https://bugzilla.redhat.com/show_bug.cgi?id=1817718
- https://bugzilla.redhat.com/show_bug.cgi?id=1818818
- https://bugzilla.redhat.com/show_bug.cgi?id=1819377
- https://bugzilla.redhat.com/show_bug.cgi?id=1822077
- https://bugzilla.redhat.com/show_bug.cgi?id=1824059
- https://bugzilla.redhat.com/show_bug.cgi?id=1824918
- https://bugzilla.redhat.com/show_bug.cgi?id=1831399
- https://bugzilla.redhat.com/show_bug.cgi?id=1834845
- https://bugzilla.redhat.com/show_bug.cgi?id=1835127
- https://bugzilla.redhat.com/show_bug.cgi?id=1839634
- https://bugzilla.redhat.com/show_bug.cgi?id=1850716
- https://access.redhat.com/security/updates/classification/#important
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index
- https://access.redhat.com/articles/5442481
- https://access.redhat.com/errata/RHSA-2020:4062 (Advisory)
Frequently Asked Questions
What is the severity of RHSA-2020:4062?
The severity of RHSA-2020:4062 is considered critical due to potential vulnerabilities that can be exploited.
How do I fix RHSA-2020:4062?
To fix RHSA-2020:4062, update the kernel-rt package to version 3.10.0-1160.rt56.1131.el7 or higher.
What vulnerabilities are addressed in RHSA-2020:4062?
RHSA-2020:4062 addresses a use-after-free vulnerability in sound/core/timer.c (CVE-2019-19807) and other potentially critical security issues.
Which systems are affected by RHSA-2020:4062?
RHSA-2020:4062 affects systems using the kernel-rt package versions prior to 3.10.0-1160.rt56.1131.el7.
Is it safe to ignore the RHSA-2020:4062 advisory?
No, it is not safe to ignore RHSA-2020:4062 as it can lead to security risks and system instability.
- agent/weakness
- agent/severity
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/references
- agent/title
- agent/description
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2020:4062
- agent/software-canonical-lookup
- agent/event
- agent/trending
- agent/tags
- agent/source
- package-manager/redhat