RHSA-2019:2741
Vulnerability Summary
Timeline
Description
Red Hat Security Advisory: kernel-rt security and bug fix update
CVSS Metrics
- v3.0•HIGH•Score: 8CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Systems
- redhat•kernel-rt
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-core
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-debug
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-debug-core
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-debug-debuginfo
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-debug-devel
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-debug-kvm
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-debug-kvm-debuginfo
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-debug-modules
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-debug-modules-extra
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-debuginfo
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-debuginfo-common-x86_64
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-devel
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-kvm
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-kvm-debuginfo
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-modules
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
- redhat•kernel-rt-modules-extra
< 0:4.18.0-80.11.1.rt9.156.el8_0 | < 0:4.18.0-80.11.1.rt9.156.el8_0
References (35)
- https://access.redhat.com/errata/RHSA-2019:2741
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=1695044
- https://bugzilla.redhat.com/show_bug.cgi?id=1701224
- https://bugzilla.redhat.com/show_bug.cgi?id=1701842
- https://bugzilla.redhat.com/show_bug.cgi?id=1703063
- https://bugzilla.redhat.com/show_bug.cgi?id=1713059
- https://bugzilla.redhat.com/show_bug.cgi?id=1726362
- https://bugzilla.redhat.com/show_bug.cgi?id=1734475
- https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2741.json
- https://access.redhat.com/security/cve/CVE-2018-19824
- https://bugzilla.redhat.com/show_bug.cgi?id=1655816
- https://www.cve.org/CVERecord?id=CVE-2018-19824
- https://nvd.nist.gov/vuln/detail/CVE-2018-19824
- https://www.openwall.com/lists/oss-security/2018/12/03/1
- https://access.redhat.com/security/cve/CVE-2019-3846
- https://www.cve.org/CVERecord?id=CVE-2019-3846
- https://nvd.nist.gov/vuln/detail/CVE-2019-3846
- https://seclists.org/oss-sec/2019/q2/133
- https://access.redhat.com/security/cve/CVE-2019-3887
- https://www.cve.org/CVERecord?id=CVE-2019-3887
- https://nvd.nist.gov/vuln/detail/CVE-2019-3887
- https://access.redhat.com/security/cve/CVE-2019-9500
- https://www.cve.org/CVERecord?id=CVE-2019-9500
- https://nvd.nist.gov/vuln/detail/CVE-2019-9500
- https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html#cve-2019-9500-heap-buffer-overflow-in-brcmf-wowl-nd-results
- https://kb.cert.org/vuls/id/166939/
- https://www.bleepingcomputer.com/news/security/broadcom-wifi-driver-flaws-expose-computers-phones-iot-to-rce-attacks/
- https://access.redhat.com/security/cve/CVE-2019-9503
- https://www.cve.org/CVERecord?id=CVE-2019-9503
- https://nvd.nist.gov/vuln/detail/CVE-2019-9503
- https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html#cve-2019-9503-remotely-sending-firmware-events-bypassing-is-wlc-event-frame
- https://access.redhat.com/security/cve/CVE-2019-11487
- https://www.cve.org/CVERecord?id=CVE-2019-11487
- https://nvd.nist.gov/vuln/detail/CVE-2019-11487