GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

RHSA-2020_1769

Vulnerability from csaf_redhat - Published: 2020-04-28 15:43 - Updated: 2024-11-15 11:44
Summary
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Severity
Important
Notes
Topic: An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: use-after-free in __blk_add_trace in kernel/trace/blktrace.c (CVE-2019-19768) * kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence (CVE-2018-16871) * kernel: memory leak in the kernel_read_file function in fs/exec.c allows to cause a denial of service (CVE-2019-8980) * kernel: unprivileged users able to create RAW sockets in AF_IEEE802154 network protocol. (CVE-2019-17053) * kernel: unprivileged users able to create RAW sockets in AF_ISDN network protocol. (CVE-2019-17055) * kernel: integer overflow in tcp_ack_update_rtt in net/ipv4/tcp_input.c (CVE-2019-18805) * kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver (CVE-2019-19534) * kernel: some ipv6 protocols not encrypted over ipsec tunnel. (CVE-2020-1749) * Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR (CVE-2019-10639) * kernel: An out-of-bounds read in drivers/scsi/qedi/qedi_dbg.c leading to crash or information disclosure (CVE-2019-15090) * kernel: a NULL pointer dereference in drivers/net/wireless/ath/ath10k/usb.c leads to a crash (CVE-2019-15099) * kernel: Null pointer dereference in the sound/usb/line6/pcm.c (CVE-2019-15221) * kernel: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows for a DoS (CVE-2019-19057) * kernel: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel (DOS) (CVE-2019-19073) * kernel: a memory leak in the ath9k management function in allows local DoS (CVE-2019-19074) * kernel: when cpu.cfs_quota_us is used allows attackers to cause a denial of service against non-cpu-bound applications (CVE-2019-19922) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: This update also fixes several bugs and adds various enhancements. Documentation for these changes is available from the Release Notes document linked to in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

A flaw was found in the Linux kernel's NFS implementation. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.

CWE-476 - NULL Pointer Dereference
Affected products
Product Identifier Version Remediation
Unresolved product id: BaseOS-8.2.0.GA:bpftool-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:bpftool-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:bpftool-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:bpftool-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-0:4.18.0-193.el8.src
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-abi-whitelists-0:4.18.0-193.el8.noarch
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-core-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-core-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-core-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-core-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-common-aarch64-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-common-ppc64le-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-common-s390x-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-common-x86_64-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-doc-0:4.18.0-193.el8.noarch
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-libs-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-libs-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-libs-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-libs-devel-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-libs-devel-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-zfcpdump-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-zfcpdump-core-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-zfcpdump-debuginfo-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-zfcpdump-devel-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-zfcpdump-modules-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:kernel-zfcpdump-modules-extra-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:perf-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:perf-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:perf-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:perf-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:python3-perf-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:python3-perf-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:python3-perf-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:python3-perf-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:bpftool-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:bpftool-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:bpftool-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:bpftool-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-0:4.18.0-193.el8.src
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-abi-whitelists-0:4.18.0-193.el8.noarch
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-core-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-core-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-core-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-core-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-common-aarch64-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-common-ppc64le-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-common-s390x-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-common-x86_64-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-doc-0:4.18.0-193.el8.noarch
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-tools-libs-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-tools-libs-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-tools-libs-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-tools-libs-devel-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-tools-libs-devel-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-zfcpdump-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-zfcpdump-core-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-zfcpdump-debuginfo-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-zfcpdump-devel-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-zfcpdump-modules-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:kernel-zfcpdump-modules-extra-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:perf-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:perf-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:perf-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:perf-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:python3-perf-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:python3-perf-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:python3-perf-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:python3-perf-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.aarch64
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.ppc64le
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.s390x
Vendor Fix fix
Unresolved product id: CRB-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.x86_64
Vendor Fix fix
Threats
Impact Moderate

A flaw was found in the Linux kernel’s implementation of the WiFi station handoff code. An attacker within the radio range could use this flaw to deny a valid device from joining the access point.

CWE-440 - Expected Behavior Violation
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate

A kernel memory leak was found in the kernel_read_file() function in the fs/exec.c file in the Linux kernel. An attacker could use this flaw to cause a memory leak and thus a denial of service (DoS).

CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate

A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a net_hash_mix() function. A remote user could observe this IP ID field to extract the kernel address bits used to derive its value, which may result in leaking the hash key and potentially defeating KASLR.

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

A use-after-free flaw was found in the Linux kernel's MDIO section of the network management subsystem. An attacker who is able to hot-plug a network device can trigger the __mdiobus_register() function in drivers/net/phy/mdio_bus.c, which can cause a use-after-free condition causing a memory corruption and kernel panic or privilege escalation.

CWE-416 - Use After Free
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate

An out-of-bounds (OOB) memory access flaw was found in the Qlogic ISCSI module in the Linux kernel's qedi_dbg_* family of functions in drivers/scsi/qedi/qedi_dbg.c. Here a local attacker with a special user privilege account (or a root) can cause an out-of-bound memory access leading to a system crash or a leak of internal kernel information.

CWE-125 - Out-of-bounds Read
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

A null pointer dereference flaw was discovered in the Linux kernel's implementation of the ath10k USB device driver. The vulnerability requires the attacker to plug in a specially crafted hardware device that present endpoint descriptors that normal ath10k devices do not recognize. System availability is the highest threat with this vulnerability.

CWE-20 - Improper Input Validation
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

A NULL pointer dereference flaw was found in the way the LINE6 drivers in the Linux kernel allocated buffers for USB packets. This flaw allows an attacker with physical access to the system to crash the system.

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

A NULL pointer dereference flaw was found in the way the Line 6 POD USB driver in the Linux kernel handled disconnection. This flaw allows an attacker with physical access to the system to crash the system.

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

A flaw was found in the Linux kernel. A check was not done on the alloc_workqueue return value of the iwl_trans_pcie_alloc function potentially leading to a NULL pointer dereference. This error condition could lead to a denial of service. The highest threat from this vulnerability is to system availability.

CWE-476 - NULL Pointer Dereference
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

A flaw in the Linux kernel's WiFi beacon validation code was discovered. The code does not check the length of the variable length elements in the beacon head potentially leading to a buffer overflow. System availability, as well as data confidentiality and integrity, can be impacted by this vulnerability.

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate

A vulnerability was discovered in the Linux kernel's AF_IEEE802154 networking module where permissions checks are not enforced. This can allow an unprivileged user to create raw sockets for this protocol leading to the potential for data leaks or system unavailability.

CWE-250 - Execution with Unnecessary Privileges
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate

A vulnerability was found in the Linux kernel’s implementation of the AF_ISDN protocol, which does not enforce the CAP_NET_RAW capability. This flaw can allow unprivileged users to create a raw socket for this protocol. This could further allow the user to control the availability of an existing ISDN circuit.

CWE-250 - Execution with Unnecessary Privileges
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate

A device tracking vulnerability was found in the flow_dissector feature in the Linux kernel. This flaw occurs because the auto flowlabel of the UDP IPv6 packet relies on a 32-bit hashmd value as a secret, and jhash (instead of siphash) is used. The hashmd value remains the same starting from boot time and can be inferred by an attacker.

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate

A flaw was reported in the Linux kernel's TCP subsystem while calculating a packet round trip time, when a sysctl parameter (/proc/sys/net/ipv4/tcp_min_rtt_wlen) is set incorrectly. This causes an integer overflow which can lead to a denial Of service (DOS) attack.

CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate

A flaw was found in the Linux kernel. The Mellanox Technologies Innova driver mishandles resource cleanup on error. An attacker, able to trigger error could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.

CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate

A flaw was found in the way the Mellanox 5th generation network adapters (ConnectX series) core driver in the Linux kernel handled resource cleanup in the mlx5_fw_fatal_reporter_dump function. This flaw allows an attacker with the ability to trigger errors in the mlx5_crdump_collect function to crash the system.

CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

A flaw was found in the Linux kernel. The Wireless configuration API functionality mishandles resource cleanup in nl80211_get_ftm_responder_stats function. An attacker able to trigger the resource cleanup code path could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.

CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate

Two memory leak flaws were found in the Linux kernel's mwifiex_pcie_init_evt_ring() function. A local attacker, able to reload the kernel module or hotplug Marvell WiFi hardware using this driver, can cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures.

CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

A flaw was found in the Linux kernel. The Intel Wireless WiFi MVM Firmware driver mishandles resource cleanup during device coredump. An attacker able to trigger the device coredump and system-wide out of memory conditions at the same time could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.

CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

A flaw was found in the way the Intel Wireless driver in the Linux kernel handled resource cleanup during Gen 3 device initialization. This flaw allows an attacker with the ability to restrict access to DMA coherent memory on device initialization, to crash the system.

CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

A flaw was found in the Linux kernel. The Intel OPA Gen1 driver mishandles resource cleanup. An attacker able to induce low memory condition on the system could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.

CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

A flaw was found in the Linux kernel. The acp_hw_init function fails to cleanup resources properly. A local attacker can induce an error condition to crash the system. The highest threat from this vulnerability is to system availability.

CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.

CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4.

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

A memory leak flaw was found in the Broadcom NetXtreme HCA driver in the Linux kernel, in the way it handled resource cleanup on the copy to userspace error. This flaw allows a local attacker to trigger this error and crash the system.

CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate

An out-of-bounds write flaw was found in the Linux kernel’s HID drivers. An attacker, able to plug in a malicious USB device, can crash the system or read and write to memory with an incorrect address.

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate

An information-leak flaw was found in the Linux kernel's pcan USB driver. When a device using this driver connects to the system, the stack information is leaked to the CAN bus, a controller area network for automobiles. The highest threat with this vulnerability is breach of data confidentiality.

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate

A use-after-free vulnerability was found in the Linux kernel’s implementation of blktrace in the __blk_add_trace function. A local attacker with permissions to run block trace instructions against a device can create a situation where the core block_trace object is used after it is freed. The attacker can pre-groom memory to race this use-after-free to create a condition where the memory is corrupted and cause privilege escalation. The ability to create this condition requires elevated privileges, and it has been decided that this change in Red Hat Enterprise Linux 5 and 6 would risk introducing possible regressions and will not be backported.

CWE-416 - Use After Free
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Important

A flaw was found in the Linux kernel’s scheduler, where it can allow attackers to cause a denial of service against non-CPU-bound applications by generating a workload that triggers unwanted scheduling slice expiration. A local attacker who can trigger a specific workload type could abuse this technique to trigger a system to be seen as degraded, and possibly trigger workload-rebalance in systems that use the slice-expiration metric as a measure of system health.

CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.

CWE-319 - Cleartext Transmission of Sensitive Information
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate

A use-after-free flaw was found in the Linux kernel’s GPU driver functionality when destroying GEM context. A local user could use this flaw to crash the system or potentially escalate their privileges.

CWE-416 - Use After Free
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate

There is a use-after-free problem seen due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.

CWE-416 - Use After Free
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Low

A NULL pointer dereference flaw was found in the Linux kernel's network scheduler. This issue occurs when offloading is enabled, the cbs instance is not added to the list. The code also incorrectly handles the case when offload is disabled without removing the qdisc. This could allow a local user to cause a denial of service condition.

CWE-476 - NULL Pointer Dereference
Affected products
Fixed 214 products, the same list as for CVE-2018-16871
Threats
Impact Moderate
References
URL Category
https://access.redhat.com/errata/RHSA-2020:1769 self
https://access.redhat.com/security/updates/classi… external
https://access.redhat.com/documentation/en-us/red… external
https://bugzilla.redhat.com/show_bug.cgi?id=1655162 external
https://bugzilla.redhat.com/show_bug.cgi?id=1679972 external
https://bugzilla.redhat.com/show_bug.cgi?id=1729933 external
https://bugzilla.redhat.com/show_bug.cgi?id=1738741 external
https://bugzilla.redhat.com/show_bug.cgi?id=1743526 external
https://bugzilla.redhat.com/show_bug.cgi?id=1743560 external
https://bugzilla.redhat.com/show_bug.cgi?id=1749633 external
https://bugzilla.redhat.com/show_bug.cgi?id=1749974 external
https://bugzilla.redhat.com/show_bug.cgi?id=1752765 external
https://bugzilla.redhat.com/show_bug.cgi?id=1757902 external
https://bugzilla.redhat.com/show_bug.cgi?id=1758242 external
https://bugzilla.redhat.com/show_bug.cgi?id=1758248 external
https://bugzilla.redhat.com/show_bug.cgi?id=1765547 external
https://bugzilla.redhat.com/show_bug.cgi?id=1767664 external
https://bugzilla.redhat.com/show_bug.cgi?id=1771430 external
https://bugzilla.redhat.com/show_bug.cgi?id=1771496 external
https://bugzilla.redhat.com/show_bug.cgi?id=1771691 external
https://bugzilla.redhat.com/show_bug.cgi?id=1774933 external
https://bugzilla.redhat.com/show_bug.cgi?id=1774937 external
https://bugzilla.redhat.com/show_bug.cgi?id=1775050 external
https://bugzilla.redhat.com/show_bug.cgi?id=1783540 external
https://bugzilla.redhat.com/show_bug.cgi?id=1786164 external
https://bugzilla.redhat.com/show_bug.cgi?id=1789594 external
https://bugzilla.redhat.com/show_bug.cgi?id=1792512 external
https://bugzilla.redhat.com/show_bug.cgi?id=1795049 external
https://bugzilla.redhat.com/show_bug.cgi?id=1803162 external
https://bugzilla.redhat.com/show_bug.cgi?id=1809833 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2018-16871 self
https://bugzilla.redhat.com/show_bug.cgi?id=1655162 external
https://www.cve.org/CVERecord?id=CVE-2018-16871 external
https://nvd.nist.gov/vuln/detail/CVE-2018-16871 external
https://access.redhat.com/security/cve/CVE-2019-5108 self
https://bugzilla.redhat.com/show_bug.cgi?id=1789927 external
https://www.cve.org/CVERecord?id=CVE-2019-5108 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5108 external
https://access.redhat.com/security/cve/CVE-2019-8980 self
https://bugzilla.redhat.com/show_bug.cgi?id=1679972 external
https://www.cve.org/CVERecord?id=CVE-2019-8980 external
https://nvd.nist.gov/vuln/detail/CVE-2019-8980 external
https://access.redhat.com/security/cve/CVE-2019-10639 self
https://bugzilla.redhat.com/show_bug.cgi?id=1729933 external
https://www.cve.org/CVERecord?id=CVE-2019-10639 external
https://nvd.nist.gov/vuln/detail/CVE-2019-10639 external
https://arxiv.org/pdf/1906.10478.pdf external
https://access.redhat.com/security/cve/CVE-2019-12819 self
https://bugzilla.redhat.com/show_bug.cgi?id=1721962 external
https://www.cve.org/CVERecord?id=CVE-2019-12819 external
https://nvd.nist.gov/vuln/detail/CVE-2019-12819 external
https://access.redhat.com/security/cve/CVE-2019-15090 self
https://bugzilla.redhat.com/show_bug.cgi?id=1743526 external
https://www.cve.org/CVERecord?id=CVE-2019-15090 external
https://nvd.nist.gov/vuln/detail/CVE-2019-15090 external
https://access.redhat.com/security/cve/CVE-2019-15099 self
https://bugzilla.redhat.com/show_bug.cgi?id=1743560 external
https://www.cve.org/CVERecord?id=CVE-2019-15099 external
https://nvd.nist.gov/vuln/detail/CVE-2019-15099 external
https://access.redhat.com/security/cve/CVE-2019-15221 self
https://bugzilla.redhat.com/show_bug.cgi?id=1749974 external
https://www.cve.org/CVERecord?id=CVE-2019-15221 external
https://nvd.nist.gov/vuln/detail/CVE-2019-15221 external
https://access.redhat.com/security/cve/CVE-2019-15223 self
https://bugzilla.redhat.com/show_bug.cgi?id=1749976 external
https://www.cve.org/CVERecord?id=CVE-2019-15223 external
https://nvd.nist.gov/vuln/detail/CVE-2019-15223 external
https://access.redhat.com/security/cve/CVE-2019-16234 self
https://bugzilla.redhat.com/show_bug.cgi?id=1760441 external
https://www.cve.org/CVERecord?id=CVE-2019-16234 external
https://nvd.nist.gov/vuln/detail/CVE-2019-16234 external
https://lkml.org/lkml/2019/9/9/487 external
https://access.redhat.com/security/cve/CVE-2019-16746 self
https://bugzilla.redhat.com/show_bug.cgi?id=1760306 external
https://www.cve.org/CVERecord?id=CVE-2019-16746 external
https://nvd.nist.gov/vuln/detail/CVE-2019-16746 external
https://access.redhat.com/security/cve/CVE-2019-17053 self
https://bugzilla.redhat.com/show_bug.cgi?id=1758242 external
https://www.cve.org/CVERecord?id=CVE-2019-17053 external
https://nvd.nist.gov/vuln/detail/CVE-2019-17053 external
https://access.redhat.com/security/cve/CVE-2019-17055 self
https://bugzilla.redhat.com/show_bug.cgi?id=1758248 external
https://www.cve.org/CVERecord?id=CVE-2019-17055 external
https://nvd.nist.gov/vuln/detail/CVE-2019-17055 external
https://access.redhat.com/security/cve/CVE-2019-18282 self
https://bugzilla.redhat.com/show_bug.cgi?id=1796360 external
https://www.cve.org/CVERecord?id=CVE-2019-18282 external
https://nvd.nist.gov/vuln/detail/CVE-2019-18282 external
https://access.redhat.com/security/cve/CVE-2019-18805 self
https://bugzilla.redhat.com/show_bug.cgi?id=1771496 external
https://www.cve.org/CVERecord?id=CVE-2019-18805 external
https://nvd.nist.gov/vuln/detail/CVE-2019-18805 external
https://access.redhat.com/security/cve/CVE-2019-19045 self
https://bugzilla.redhat.com/show_bug.cgi?id=1774983 external
https://www.cve.org/CVERecord?id=CVE-2019-19045 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19045 external
https://access.redhat.com/security/cve/CVE-2019-19047 self
https://bugzilla.redhat.com/show_bug.cgi?id=1774991 external
https://www.cve.org/CVERecord?id=CVE-2019-19047 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19047 external
https://access.redhat.com/security/cve/CVE-2019-19055 self
https://bugzilla.redhat.com/show_bug.cgi?id=1775074 external
https://www.cve.org/CVERecord?id=CVE-2019-19055 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19055 external
https://access.redhat.com/security/cve/CVE-2019-19057 self
https://bugzilla.redhat.com/show_bug.cgi?id=1775050 external
https://www.cve.org/CVERecord?id=CVE-2019-19057 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19057 external
https://access.redhat.com/security/cve/CVE-2019-19058 self
https://bugzilla.redhat.com/show_bug.cgi?id=1775047 external
https://www.cve.org/CVERecord?id=CVE-2019-19058 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19058 external
https://access.redhat.com/security/cve/CVE-2019-19059 self
https://bugzilla.redhat.com/show_bug.cgi?id=1775042 external
https://www.cve.org/CVERecord?id=CVE-2019-19059 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19059 external
https://access.redhat.com/security/cve/CVE-2019-19065 self
https://bugzilla.redhat.com/show_bug.cgi?id=1775000 external
https://www.cve.org/CVERecord?id=CVE-2019-19065 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19065 external
https://access.redhat.com/security/cve/CVE-2019-19067 self
https://bugzilla.redhat.com/show_bug.cgi?id=1774968 external
https://www.cve.org/CVERecord?id=CVE-2019-19067 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19067 external
https://access.redhat.com/security/cve/CVE-2019-19073 self
https://bugzilla.redhat.com/show_bug.cgi?id=1774937 external
https://www.cve.org/CVERecord?id=CVE-2019-19073 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19073 external
https://access.redhat.com/security/cve/CVE-2019-19074 self
https://bugzilla.redhat.com/show_bug.cgi?id=1774933 external
https://www.cve.org/CVERecord?id=CVE-2019-19074 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19074 external
https://access.redhat.com/security/cve/CVE-2019-19077 self
https://bugzilla.redhat.com/show_bug.cgi?id=1775724 external
https://www.cve.org/CVERecord?id=CVE-2019-19077 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19077 external
https://access.redhat.com/security/cve/CVE-2019-19532 self
https://bugzilla.redhat.com/show_bug.cgi?id=1781821 external
https://www.cve.org/CVERecord?id=CVE-2019-19532 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19532 external
https://access.redhat.com/security/cve/CVE-2019-19534 self
https://bugzilla.redhat.com/show_bug.cgi?id=1783540 external
https://www.cve.org/CVERecord?id=CVE-2019-19534 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19534 external
https://access.redhat.com/security/cve/CVE-2019-19768 self
https://bugzilla.redhat.com/show_bug.cgi?id=1786164 external
https://www.cve.org/CVERecord?id=CVE-2019-19768 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19768 external
https://access.redhat.com/security/cve/CVE-2019-19922 self
https://bugzilla.redhat.com/show_bug.cgi?id=1792512 external
https://www.cve.org/CVERecord?id=CVE-2019-19922 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19922 external
https://access.redhat.com/security/cve/CVE-2020-1749 self
https://bugzilla.redhat.com/show_bug.cgi?id=1809833 external
https://www.cve.org/CVERecord?id=CVE-2020-1749 external
https://nvd.nist.gov/vuln/detail/CVE-2020-1749 external
https://access.redhat.com/security/cve/CVE-2020-7053 self
https://bugzilla.redhat.com/show_bug.cgi?id=1795624 external
https://www.cve.org/CVERecord?id=CVE-2020-7053 external
https://nvd.nist.gov/vuln/detail/CVE-2020-7053 external
https://access.redhat.com/security/cve/CVE-2020-10690 self
https://bugzilla.redhat.com/show_bug.cgi?id=1817141 external
https://www.cve.org/CVERecord?id=CVE-2020-10690 external
https://nvd.nist.gov/vuln/detail/CVE-2020-10690 external
https://access.redhat.com/security/cve/CVE-2021-33630 self
https://bugzilla.redhat.com/show_bug.cgi?id=2261974 external
https://www.cve.org/CVERecord?id=CVE-2021-33630 external
https://nvd.nist.gov/vuln/detail/CVE-2021-33630 external
https://seclists.org/oss-sec/2024/q1/65 external

Loading 2.1 MB of JSON…



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Loading…