RHSA-2020:4236: Moderate: kernel security and bug fix update
The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver (CVE-2019-19527)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> OVS drops secondary SCTP connection (BZ#1871912)</li> <li> A gfs2 filesystem had a withdraw: function = gfs2metaindirectbuffer, file = fs/gfs2/metaio.c, line = 428 (BZ#1872271)</li> <li> Secure boot key is not loaded with kernel-3.10.0-1159.el7: MODSIGN: Couldn't get UEFI MokListRT (BZ#1876953)</li>
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:4236?
The vulnerability identified by RHSA-2020:4236 is classified as high severity due to a use-after-free issue caused by malicious USB devices.
How do I fix RHSA-2020:4236?
To fix the RHSA-2020:4236 vulnerability, update the kernel package to version 3.10.0-1062.36.1.el7 or later.
What systems are affected by RHSA-2020:4236?
RHSA-2020:4236 affects Red Hat Enterprise Linux 7 systems with specific versions of the kernel and related packages.
What specific CVE is associated with RHSA-2020:4236?
The associated CVE for RHSA-2020:4236 is CVE-2019-19527, which highlights the use-after-free vulnerability.
Is RHSA-2020:4236 a critical update?
While RHSA-2020:4236 is not classified as critical, it is crucial to apply the fix to mitigate potential risks associated with USB device manipulation.