rhsa-2019_3076
Vulnerability from csaf_redhat
Published
2019-10-16 07:13
Modified
2024-11-05 21:28
Summary
Red Hat Security Advisory: kpatch-patch security update

Notes

Topic
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Security Fix(es): * kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c (CVE-2018-20856) * kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c (CVE-2019-3846) * hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB) (CVE-2019-9506) * kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c (CVE-2019-10126) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for kpatch-patch is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.\n\nSecurity Fix(es):\n\n* kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c (CVE-2018-20856)\n\n* kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c (CVE-2019-3846)\n\n* hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB) (CVE-2019-9506)\n\n* kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c (CVE-2019-10126)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:3076",
        "url": "https://access.redhat.com/errata/RHSA-2019:3076"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1713059",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1713059"
      },
      {
        "category": "external",
        "summary": "1716992",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1716992"
      },
      {
        "category": "external",
        "summary": "1727857",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1727857"
      },
      {
        "category": "external",
        "summary": "1738705",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738705"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3076.json"
      }
    ],
    "title": "Red Hat Security Advisory: kpatch-patch security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:28:56+00:00",
      "generator": {
        "date": "2024-11-05T21:28:56+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:3076",
      "initial_release_date": "2019-10-16T07:13:59+00:00",
      "revision_history": [
        {
          "date": "2019-10-16T07:13:59+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-10-16T07:13:59+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:28:56+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-7.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
                "product": {
                  "name": "kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
                  "product_id": "kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-3_10_0-1062_1_1@1-4.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
                "product": {
                  "name": "kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
                  "product_id": "kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-3_10_0-1062_1_1-debuginfo@1-4.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
                "product": {
                  "name": "kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
                  "product_id": "kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-3_10_0-1062@1-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
                "product": {
                  "name": "kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
                  "product_id": "kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-3_10_0-1062-debuginfo@1-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
                "product": {
                  "name": "kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
                  "product_id": "kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-3_10_0-1062_1_2@1-3.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
                "product": {
                  "name": "kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
                  "product_id": "kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-3_10_0-1062_1_2-debuginfo@1-3.el7?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
                "product": {
                  "name": "kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
                  "product_id": "kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-3_10_0-1062_1_1@1-4.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
                "product": {
                  "name": "kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
                  "product_id": "kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-3_10_0-1062_1_1-debuginfo@1-4.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
                "product": {
                  "name": "kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
                  "product_id": "kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-3_10_0-1062@1-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
                "product": {
                  "name": "kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
                  "product_id": "kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-3_10_0-1062-debuginfo@1-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
                "product": {
                  "name": "kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
                  "product_id": "kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-3_10_0-1062_1_2@1-3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64",
                "product": {
                  "name": "kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64",
                  "product_id": "kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-3_10_0-1062_1_2-debuginfo@1-3.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
                "product": {
                  "name": "kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
                  "product_id": "kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-3_10_0-1062_1_1@1-4.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-3_10_0-1062-0:1-5.el7.src",
                "product": {
                  "name": "kpatch-patch-3_10_0-1062-0:1-5.el7.src",
                  "product_id": "kpatch-patch-3_10_0-1062-0:1-5.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-3_10_0-1062@1-5.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
                "product": {
                  "name": "kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
                  "product_id": "kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-3_10_0-1062_1_2@1-3.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le"
        },
        "product_reference": "kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-3_10_0-1062-0:1-5.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.src"
        },
        "product_reference": "kpatch-patch-3_10_0-1062-0:1-5.el7.src",
        "relates_to_product_reference": "7Server-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64"
        },
        "product_reference": "kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
        "relates_to_product_reference": "7Server-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le"
        },
        "product_reference": "kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64"
        },
        "product_reference": "kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
        "relates_to_product_reference": "7Server-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le"
        },
        "product_reference": "kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
        "relates_to_product_reference": "7Server-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src"
        },
        "product_reference": "kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
        "relates_to_product_reference": "7Server-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64"
        },
        "product_reference": "kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
        "relates_to_product_reference": "7Server-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le"
        },
        "product_reference": "kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
        "relates_to_product_reference": "7Server-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64"
        },
        "product_reference": "kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
        "relates_to_product_reference": "7Server-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le"
        },
        "product_reference": "kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src"
        },
        "product_reference": "kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
        "relates_to_product_reference": "7Server-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64"
        },
        "product_reference": "kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
        "relates_to_product_reference": "7Server-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le"
        },
        "product_reference": "kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64"
        },
        "product_reference": "kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64",
        "relates_to_product_reference": "7Server-7.7.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-20856",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2019-07-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1738705"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u2019s block driver implementation (blk_drain_queue() function) where a use-after-free condition could be triggered while draining the outstanding command queue in the systems block device subsystem. An attacker could use this flaw to crash the system or corrupt local memory, which may lead to privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.src",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-20856"
        },
        {
          "category": "external",
          "summary": "RHBZ#1738705",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738705"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-20856",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-20856"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20856",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20856"
        }
      ],
      "release_date": "2019-07-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-16T07:13:59+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3076"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "huangwen"
          ],
          "organization": "ADLab of Venustech"
        }
      ],
      "cve": "CVE-2019-3846",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2019-05-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1713059"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s Marvell wifi chip driver. A heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c allows remote attackers to cause a denial of service(system crash) or execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is currently rated as Important as it is possible for an attacker to setup a wifi access point with identical configuration in another location and intercept have the system auto connect and possibly be exploited.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.src",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-3846"
        },
        {
          "category": "external",
          "summary": "RHBZ#1713059",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1713059"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-3846",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-3846"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-3846",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3846"
        },
        {
          "category": "external",
          "summary": "https://seclists.org/oss-sec/2019/q2/133",
          "url": "https://seclists.org/oss-sec/2019/q2/133"
        }
      ],
      "release_date": "2019-05-30T12:53:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-16T07:13:59+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3076"
        },
        {
          "category": "workaround",
          "details": "This flaw requires a system with marvell wifi network card to be attempting to connect to a attacker controlled wifi network.  A temporary mitigation may be to only connect to known-good networks via wifi, or connect to a network via ethernet.  Alternatively if wireless networking is not used the mwifiex kernel module can be blacklisted to prevent misuse of the vulnerable code.",
          "product_ids": [
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c"
    },
    {
      "cve": "CVE-2019-9506",
      "cwe": {
        "id": "CWE-327",
        "name": "Use of a Broken or Risky Cryptographic Algorithm"
      },
      "discovery_date": "2019-06-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1727857"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was discovered in the Bluetooth protocol.  An attacker within physical proximity to the Bluetooth connection could downgrade the encryption protocol to be trivially brute forced.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.src",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9506"
        },
        {
          "category": "external",
          "summary": "RHBZ#1727857",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1727857"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9506",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9506"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9506",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9506"
        }
      ],
      "release_date": "2019-08-10T09:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-16T07:13:59+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3076"
        },
        {
          "category": "workaround",
          "details": "At this time there is no known mitigation if bluetooth hardware is to be continue to be used.   Replacing the hardware with its wired version and disabling bluetooth may be a suitable alternative for some environments.",
          "product_ids": [
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "huangwen"
          ],
          "organization": "ADLab of Venustech"
        }
      ],
      "cve": "CVE-2019-10126",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2019-05-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1716992"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mwifiex implementation in the Linux kernel. A system connecting to wireless access point could be manipulated by an attacker with advanced permissions on the access point into localized memory corruption or possibly privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.src",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
          "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10126"
        },
        {
          "category": "external",
          "summary": "RHBZ#1716992",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1716992"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10126",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10126"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10126",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10126"
        }
      ],
      "release_date": "2019-05-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-16T07:13:59+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3076"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062-debuginfo-0:1-5.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_1-debuginfo-0:1-4.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.src",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-0:1-3.el7.x86_64",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.ppc64le",
            "7Server-7.7.Z:kpatch-patch-3_10_0-1062_1_2-debuginfo-0:1-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.