First published: Mon Oct 19 2020(Updated: )
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.<br>Security Fix(es):<br><li> kernel: net: bluetooth: type confusion while processing AMP packets (CVE-2020-12351)</li> <li> kernel: net: bluetooth: information leak when processing certain AMP packets (CVE-2020-12352)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/kernel-rt | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt-debug | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt-debug-debuginfo | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt-debug-devel | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt-debuginfo | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt-devel | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt-doc | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt-trace | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt-trace-debuginfo | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt-trace-devel | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt-debug-kvm | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt-debug-kvm-debuginfo | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt-kvm | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt-kvm-debuginfo | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt-trace-kvm | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
redhat/kernel-rt-trace-kvm-debuginfo | <3.10.0-1160.2.2.rt56.1134.el7 | 3.10.0-1160.2.2.rt56.1134.el7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2020:4280 is classified as critical due to potential remote code execution vulnerabilities in the Real Time Linux Kernel.
To fix RHSA-2020:4280, update kernel-rt and dependent packages to the version 3.10.0-1160.2.2.rt56.1134.el7.
The affected packages include kernel-rt, kernel-rt-debug, and several kernel-rt related development and debug packages.
RHSA-2020:4280 addresses a type confusion vulnerability in Bluetooth while processing AMP packets, identified as CVE-2020-12351.
Using your system without applying the patch for RHSA-2020:4280 is risky and can expose your system to critical vulnerabilities.