USN-4626-1: Linux kernel vulnerabilities

Simon Scannell discovered that the bpf verifier in the Linux kernel did not properly calculate register bounds for certain operations. A local attacker could use this to expose sensitive information kernel memory or gain administrative privileges. CVE-2020-27194 Moritz Lipp, Michael Schwarz,...

Unbreakable Enterprise kernel security update

5.4.17-2036.100.6.1.el8uek - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040802 CVE-2020-8694 CVE-2020-8695 - KVM: ioapic: break infinite recursion on lazy EOI Vitaly Kuznetsov Orabug: 32066585 CVE-2020-27152 CVE-2020-27152 - x86/mitigations: Restore paranoid checks fo...

qemu security update

CentOS Errata and Security Advisory CESA-2020:4056 An update for qemu-kvm is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

CentOS 6 : qemu-kvm (RHSA-2020:4056)

The remote CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4056 advisory. - An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets fro...

qemu security update

CentOS Errata and Security Advisory CESA-2020:4079 An update for qemu-kvm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

CVE-2020-27152

CVE-2020-27152 affects the Linux kernel prior to 5.9.2 in arch/x86/kvm/ioapic.c (ioapic_lazy_update_eoi). The issue is an infinite loop caused by improper interaction between a resampler and edge triggering. Affected software: Linux kernel up to 5.9.1, with fixed 5.9.2 per ChangeLog-5.9.2. Exploi...

CentOS 7 : qemu-kvm (RHSA-2020:4079)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4079 advisory. - An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB...

CVE-2017-5931 affecting package qemu-kvm 4.2.0-13

CVE-2017-5931 affecting package qemu-kvm 4.2.0-13. A patched version of the package is available...

CVE-2017-14167 affecting package qemu-kvm 4.2.0-13

CVE-2017-14167 affecting package qemu-kvm 4.2.0-13. A patched version of the package is available...

CVE-2020-11102 affecting package qemu-kvm 4.2.0-48

CVE-2020-11102 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2019-20175 affecting package qemu-kvm 4.2.0-48

CVE-2019-20175 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-15863 affecting package qemu-kvm 4.2.0-48

CVE-2020-15863 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2015-7504 affecting package qemu-kvm 4.2.0-13

CVE-2015-7504 affecting package qemu-kvm 4.2.0-13. A patched version of the package is available...

CVE-2020-16092 affecting package qemu-kvm 4.2.0-48

CVE-2020-16092 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-13659 affecting package qemu-kvm 4.2.0-48

CVE-2020-13659 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-1711 affecting package qemu-kvm 4.2.0-48

CVE-2020-1711 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-7039 affecting package qemu-kvm 4.2.0-48

CVE-2020-7039 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-7211 affecting package qemu-kvm 4.2.0-48

CVE-2020-7211 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

Out Of Bound Writes (OOB)

kernel-rt is vulnerable to out of bound writes attacks. A user or process able to access the /dev/kvm device could use this flaw to crash the system, resulting in a denial of service...

Moderate: Red Hat Security Advisory: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

An update for the virt:rhel and virt-devel:rhel modules is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...