Lucene search

K
virtuozzoVirtuozzoVZA-2019-088
HistoryNov 21, 2019 - 12:00 a.m.

Important kernel security update: New kernel 2.6.32-042stab141.3 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0

2019-11-2100:00:00
help.virtuozzo.com
81

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

45.7%

This update provides a new kernel 2.6.32-042stab141.3 for Virtuozzo Containers for Linux 4.7 and Server Bare Metal 5.0 based on the RHEL 6.10 kernel 2.6.32-754.24.3.el6. The new kernel inherits security fixes.
Vulnerability id: CVE-2018-12207
hw: Machine Check Error on Page Size Change (IFU)

Vulnerability id: CVE-2019-0155
hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write

Vulnerability id: CVE-2019-3900
Kernel: vhost_net: infinite loop while receiving packets leads to DoS

Vulnerability id: CVE-2019-14835
Kernel: vhost-net: guest to host kernel escape during migration

Vulnerability id: CVE-2019-0154
hw: Intel GPU Denial Of Service while accessing MMIO in lower power state

Vulnerability id: CVE-2019-11135
hw: TSX Transaction Asynchronous Abort (TAA)

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

45.7%