RHSA-2020:4286: Important: kernel security and bug fix update

First published: Tue Oct 20 2020(Updated: )

The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> kernel: net: bluetooth: type confusion while processing AMP packets (CVE-2020-12351)</li> <li> kernel: net: bluetooth: information leak when processing certain AMP packets (CVE-2020-12352)</li> <li> kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt (CVE-2020-14385)</li> <li> kernel: memory corruption in net/packet/af_packet.c leads to elevation of privilege (CVE-2020-14386)</li> <li> kernel: kernel: buffer over write in vgacon_scroll (CVE-2020-14331)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> [mlx5] stale ethtool steering rules remain after moving back to legacy mode (BZ#1857777)</li> <li> 50% cpu in masked_flow_update with pop to pod TCP_RR (BZ#1859216)</li> <li> take into account GSO and fragmented packets in execute_check_pkt_len action (BZ#1860169)</li> <li> RHEL8.1 - scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (BZ#1866371)</li> <li> RHEL8.3 Pre-Beta - smc: SMC connections hang with later-level implementations (BZ#1866390)</li> <li> Incorrect pinning of IRQ threads on isolated CPUs by drivers that use cpumask_local_spread() (BZ#1867174)</li> <li> [RHEL8] Fixes for DEADLINE scheduler class (BZ#1867612)</li> <li> RHEL8.1 - s390/pci: Fix unexpected write combine on resource (BZ#1869276)</li> <li> dm multipath: fix spurious failures during IO completion [EIOP-8345] (BZ#1869386)</li> <li> IO on virtio-scsi hangs when running cpu hotplug test (BZ#1869779)</li> <li> store_rps_map doesn't accept an empty bitmask, which is required for disabling RPS on a queue (BZ#1870181)</li> <li> Memory registration cache data corruption possible, fix requires backporting (BZ#1872424)</li> <li> fix another case of wait list corruption for PSM/sdma (BZ#1872766)</li> <li> [RHEL-8] Segmentation fault (core dumped) when fi_bw -e msg -v -T 1 -p "verbs" (BZ#1872771)</li> <li> fix mounting and inode number handling on s390x (BZ#1875787)</li> <li> failure to enter nohz_full mode for non SCHED_FIFO tasks (BZ#1877417)</li> <li> Secure boot key is not loaded with kernel-4.18.0-232.el8.x86_64 / shim-x64-15-15 (BZ#1877528)</li> <li> [RHEL-8.3] Kdump failed to start when secure boot enabled: kexec_file_load failed: Required key not available (BZ#1877530)</li> <li> [RHEL-8.3] Kdump/kexec kernel panicked on EFI boot: general protection fault: 0000 [#1] SMP PTI (BZ#1879988)</li> <li> Sleeping or scheduling after sched_cpu_dying() led to "scheduling while atomic" and BUG at kernel/cpu.c:907! (BZ#1880081)</li> <li> [conntrack] udp packet reverse NAT occasionally fail when race condition request combination with the DNAT load balancing rules (BZ#1882095)</li> <li> [Regression] RHEL8.3 Beta - Do not initiate shutdown for EPOW_SHUTDOWN_ON_UPS event (BZ#1882243)</li>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/description
• agent/event
• agent/first-publish-date
• agent/last-modified-date
• agent/references
• agent/remedy
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/title
• agent/type
• agent/weakness
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2020:4286
• agent/software-canonical-lookup
• package-manager/redhat