RHSA-2020:4279: Important: kernel-alt security update
The kernel-alt packages provide the Linux kernel version 4.x.<br>Security Fix(es):<br><li> kernel: net: bluetooth: type confusion while processing AMP packets (CVE-2020-12351)</li> <li> kernel: net: bluetooth: information leak when processing certain AMP packets (CVE-2020-12352)</li> <li> kernel: information exposure in drivers/char/random.c and kernel/time/timer.c (CVE-2020-16166)</li> <li> kernel: TOCTOU mismatch in the NFS client code (CVE-2020-25212)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:4279?
The severity of RHSA-2020:4279 is classified as a moderate risk due to potential information leaks and type confusion in Bluetooth processing.
How do I fix RHSA-2020:4279?
To fix RHSA-2020:4279, update your kernel-alt and related packages to version 4.14.0-115.32.1.el7a or above.
What vulnerabilities are addressed by RHSA-2020:4279?
RHSA-2020:4279 addresses CVE-2020-12351 and CVE-2020-12352 related to Bluetooth AMP packet processing.
Should I be concerned about the vulnerabilities in RHSA-2020:4279?
Yes, you should be concerned as the vulnerabilities can lead to information leaks and type confusion in Bluetooth communications.
What software is affected by RHSA-2020:4279?
The affected software includes various kernel-alt packages and derivatives on the Red Hat Enterprise Linux 7 system.