Vulnerability-Lookup

RHSA-2019_3517

Vulnerability from csaf_redhat - Published: 2019-11-05 20:56 - Updated: 2024-11-22 12:50

Summary

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Severity

Important

Notes

Topic: An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nfs: use-after-free in svc_process_common() (CVE-2018-16884) * Kernel: vhost_net: infinite loop while receiving packets leads to DoS (CVE-2019-3900) * Kernel: page cache side channel attacks (CVE-2019-5489) * hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB) (CVE-2019-9506) * kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c (CVE-2019-10126) * Kernel: KVM: OOB memory access via mmio ring buffer (CVE-2019-14821) * kernel: Information Disclosure in crypto_report_one in crypto/crypto_user.c (CVE-2018-19854) * kernel: usb: missing size check in the __usb_get_extra_descriptor() leading to DoS (CVE-2018-20169) * kernel: Heap address information leak while using L2CAP_GET_CONF_OPT (CVE-2019-3459) * kernel: Heap address information leak while using L2CAP_PARSE_CONF_RSP (CVE-2019-3460) * kernel: SCTP socket buffer memory leak leading to denial of service (CVE-2019-3874) * kernel: denial of service vector through vfio DMA mappings (CVE-2019-3882) * kernel: null-pointer dereference in hci_uart_set_flow_control (CVE-2019-10207) * kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping (CVE-2019-11599) * kernel: fs/ext4/extents.c leads to information disclosure (CVE-2019-11833) * kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command (CVE-2019-11884) * kernel: use-after-free in arch/x86/lib/insn-eval.c (CVE-2019-13233) * kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service (CVE-2019-15916) * kernel: Linux stack ASLR implementation Integer overflow (CVE-2015-1593) * kernel: oob memory read in hso_probe in drivers/net/usb/hso.c (CVE-2018-19985) * Kernel: KVM: leak of uninitialized stack contents to guest (CVE-2019-7222) * Kernel: net: weak IP ID generation leads to remote device tracking (CVE-2019-10638) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2015-1593

An integer overflow flaw was found in the way the Linux kernel randomized the stack for processes on certain 64-bit architecture systems, such as x86-64, causing the stack entropy to be reduced by four.

1.9 ()


                
                  AV:L/AC:M/Au:N/C:P/I:N/A:N

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 214 products

Product	Version	Remediation
Unresolved product id: BaseOS-8.1.0:bpftool-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:bpftool-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:bpftool-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:bpftool-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:bpftool-debuginfo-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:bpftool-debuginfo-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:bpftool-debuginfo-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:bpftool-debuginfo-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-0:4.18.0-147.el8.src	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-abi-whitelists-0:4.18.0-147.el8.noarch	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-core-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-core-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-core-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-core-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-cross-headers-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-cross-headers-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-cross-headers-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-cross-headers-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-core-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-core-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-core-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-core-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-debuginfo-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-debuginfo-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-debuginfo-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-debuginfo-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-devel-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-devel-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-devel-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-devel-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-modules-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-modules-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-modules-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-modules-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-modules-extra-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-modules-extra-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-modules-extra-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debuginfo-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debuginfo-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debuginfo-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debuginfo-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debuginfo-common-aarch64-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debuginfo-common-ppc64le-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debuginfo-common-s390x-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-debuginfo-common-x86_64-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-devel-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-devel-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-devel-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-devel-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-doc-0:4.18.0-147.el8.noarch	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-headers-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-headers-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-headers-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-headers-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-modules-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-modules-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-modules-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-modules-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-modules-extra-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-modules-extra-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-modules-extra-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-modules-extra-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-tools-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-tools-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-tools-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-tools-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-tools-debuginfo-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-tools-debuginfo-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-tools-debuginfo-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-tools-debuginfo-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-tools-libs-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-tools-libs-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-tools-libs-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-tools-libs-devel-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-tools-libs-devel-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-zfcpdump-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-zfcpdump-core-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-zfcpdump-debuginfo-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-zfcpdump-devel-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-zfcpdump-modules-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:kernel-zfcpdump-modules-extra-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:perf-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:perf-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:perf-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:perf-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:perf-debuginfo-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:perf-debuginfo-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:perf-debuginfo-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:perf-debuginfo-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:python3-perf-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:python3-perf-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:python3-perf-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:python3-perf-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:python3-perf-debuginfo-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:python3-perf-debuginfo-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:python3-perf-debuginfo-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.1.0:python3-perf-debuginfo-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:bpftool-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:bpftool-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:bpftool-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:bpftool-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:bpftool-debuginfo-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:bpftool-debuginfo-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:bpftool-debuginfo-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:bpftool-debuginfo-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-0:4.18.0-147.el8.src	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-abi-whitelists-0:4.18.0-147.el8.noarch	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-core-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-core-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-core-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-core-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-cross-headers-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-cross-headers-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-cross-headers-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-cross-headers-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-core-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-core-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-core-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-core-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-debuginfo-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-debuginfo-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-debuginfo-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-debuginfo-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-devel-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-devel-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-devel-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-devel-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-modules-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-modules-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-modules-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-modules-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-modules-extra-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-modules-extra-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-modules-extra-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debuginfo-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debuginfo-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debuginfo-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debuginfo-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debuginfo-common-aarch64-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debuginfo-common-ppc64le-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debuginfo-common-s390x-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-debuginfo-common-x86_64-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-devel-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-devel-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-devel-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-devel-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-doc-0:4.18.0-147.el8.noarch	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-headers-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-headers-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-headers-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-headers-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-modules-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-modules-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-modules-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-modules-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-modules-extra-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-modules-extra-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-modules-extra-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-modules-extra-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-tools-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-tools-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-tools-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-tools-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-tools-debuginfo-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-tools-debuginfo-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-tools-debuginfo-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-tools-debuginfo-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-tools-libs-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-tools-libs-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-tools-libs-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-tools-libs-devel-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-tools-libs-devel-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-zfcpdump-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-zfcpdump-core-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-zfcpdump-debuginfo-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-zfcpdump-devel-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-zfcpdump-modules-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:kernel-zfcpdump-modules-extra-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:perf-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:perf-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:perf-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:perf-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:perf-debuginfo-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:perf-debuginfo-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:perf-debuginfo-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:perf-debuginfo-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:python3-perf-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:python3-perf-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:python3-perf-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:python3-perf-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:python3-perf-debuginfo-0:4.18.0-147.el8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:python3-perf-debuginfo-0:4.18.0-147.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:python3-perf-debuginfo-0:4.18.0-147.el8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.1.0:python3-perf-debuginfo-0:4.18.0-147.el8.x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2018-16884

A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.

6.5 (Medium)


                
                  CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H

CWE-416 - Use After Free

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Important

CVE-2018-19854

An issue was discovered in the Linux kernel in the crypto_report_one() and related functions in the crypto/crypto_user.c (the crypto user configuration API) which do not fully initialize structures that are copied to userspace, potentially leaking sensitive kernel memory content to a userspace.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2018-19985

A flaw was found in the Linux kernel in the function hso_probe() which reads if_num value from the USB device (as an u8) and uses it without a length check to index an array, resulting in an OOB memory read in hso_probe() or hso_get_config_data(). An attacker with a forged USB device and physical access to a system (needed to connect such a device) can cause a system crash and a denial of service.

4.6 (Medium)


                
                  CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Low

CVE-2018-20169

A flaw was discovered in the Linux kernel's USB subsystem in the __usb_get_extra_descriptor() function in the drivers/usb/core/usb.c which mishandles a size check during the reading of an extra descriptor data. By using a specially crafted USB device which sends a forged extra descriptor, an unprivileged user with physical access to the system can potentially cause a privilege escalation or trigger a system crash or lock up and thus to cause a denial of service (DoS).

6.4 (Medium)


                
                  CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-3459

A flaw was found in the Linux kernel's implementation of Logical Link Control and Adaptation Protocol (L2CAP), part of the Bluetooth stack. An attacker, within the range of standard Bluetooth transmissions, can create and send a specially crafted packet. The response to this specially crafted packet can contain part of the kernel stack which can be used in a further attack.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-3460

A flaw was found in the Linux kernel's implementation of logical link control and adaptation protocol (L2CAP), part of the Bluetooth stack in the l2cap_parse_conf_rsp and l2cap_parse_conf_req functions. An attacker with physical access within the range of standard Bluetooth transmission can create a specially crafted packet. The response to this specially crafted packet can contain part of the kernel stack which can be used in a further attack.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-3874

The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack.

5.3 (Medium)


                
                  CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-3882

A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS).

4.7 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-3900

An infinite loop issue was found in the vhost_net kernel module while handling incoming packets in handle_rx(). The infinite loop could occur if one end sends packets faster than the other end can process them. A guest user, maybe a remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.

6.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Important

CVE-2019-5489

A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page cache' caching mechanism. A malicious user/process could use 'in memory' page-cache knowledge to infer access timings to shared memory and gain knowledge which can be used to reduce effectiveness of cryptographic strength by monitoring algorithmic behavior, infer access patterns of memory to determine code paths taken, and exfiltrate data to a blinded attacker through page-granularity access times as a side-channel.

7.1 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Important

CVE-2019-7222

An information leakage issue was found in the way Linux kernel's KVM hypervisor handled page fault exceptions while emulating instructions like VMXON, VMCLEAR, VMPTRLD, and VMWRITE with memory address as an operand. It occurs if the operand is a mmio address, as the returned exception object holds uninitialized stack memory contents. A guest user/process could use this flaw to leak host's stack memory contents to a guest.

2.8 (Low)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Low

CVE-2019-9506

A flaw was discovered in the Bluetooth protocol. An attacker within physical proximity to the Bluetooth connection could downgrade the encryption protocol to be trivially brute forced.

7.0 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Important

CVE-2019-10126

A flaw was found in the mwifiex implementation in the Linux kernel. A system connecting to wireless access point could be manipulated by an attacker with advanced permissions on the access point into localized memory corruption or possibly privilege escalation.

8.0 (High)


                
                  CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Important

CVE-2019-10207

A flaw was found in the Linux kernel’s Bluetooth implementation of UART. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash.

4.7 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-10638

A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a net_hash_mix() function. A remote user could observe a weak IP ID generation in this field to track Linux devices.

3.7 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Low

CVE-2019-11599

A flaw was found in the Linux kernel where the coredump implementation does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs. This allows local users to obtain sensitive information, cause a denial of service (DoS), or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls.

6.1 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

CWE-667 - Improper Locking

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-11833

A flaw was found in the Linux kernel's implementation of ext4 extent management. The kernel doesn't correctly initialize memory regions in the extent tree block which may be exported to a local user to obtain sensitive information by reading empty/uninitialized data from the filesystem.

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-11884

A flaw was found in the Linux kernel's implementation of the Bluetooth Human Interface Device Protocol (HIDP). A local attacker with access permissions to the Bluetooth device can issue an IOCTL which will trigger the do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c.c. This function can leak potentially sensitive information from the kernel stack memory via a HIDPCONNADD command because a name field may not be correctly NULL terminated.

6.8 (Medium)


                
                  CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-12382

A flaw was found in the Linux kernel’s implementation of Extended Display Identification Data (EDID) technology. A firmware identifier string is duplicated with the kstrdup function, and the allocation may fail under very low memory conditions. An attacker could abuse this flaw by causing a Denial of Service and crashing the system.

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-13233

A vulnerability was found in the arch/x86/lib/insn-eval.c function in the Linux kernel. An attacker could corrupt the memory due to a flaw in use-after-free access to an LDT entry caused by a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.

5.1 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-416 - Use After Free

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-13648

A flaw was found in the PowerPc platform, where the kernel will panic if the transactional memory is disabled. An attacker could use this flaw to panic the system by constructing a signal context through the transactional memory MSR bits set.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-14821

An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.

7.0 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Important

CVE-2019-15214

A vulnerability was found in the Linux kernel’s core sound driver code. A use-after-free in a race condition between disconnection events could allow a local attacker who can trigger disconnection events (remove or add hardware) to crash the system, corrupt memory, or escalate privileges.

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-15666

A flaw was found in the Linux kernel. When xfrm policy removal occurs a system crash could occur. These policy changes generally occur through the ip command or a netlink socket.

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-15916

A flaw that allowed an attacker to leak kernel memory was found in the network subsystem where an attacker with permissions to create tun/tap devices can create a denial of service and panic the system.

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-15919

An flaw was discovered in the Linux kernel's CIFS client implementation. While issuing an SMB2_write, a value can be used after it was intended to be freed when CIFS function tracing is enabled. Even though the data is used after being freed, using it to for privilege escalation does not seem possible.

7.8 (High)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-15920

An issue was discovered in the Linux kernel's implementation of the CIFS protocol. The SMB2_read function has a possible use-after-free when CIFS function tracing is enabled. While data is used after being freed, it is has not been determined how it could be used for privilege escalation.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-416 - Use After Free

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-15921

A flaw was found in the genl_register_family function in the Linux kernel. An attacker able to induce the error conditions could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Low

CVE-2019-15924

A flaw was found in the way the fm10k driver in the Linux kernel reacted to memory-related errors during driver initialization. This flaw allows a local attacker to cause a denial of service and crash the system.

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Low

CVE-2019-15927

An out-of-bounds flaw was found in the ALSA usb-audio subsystem in the Linux kernel. An array boundary check was needed to restrict the array size; failing this can cause an out-of-bound access problem. Data confidentiality and integrity, as well as system availability, are all threats with this vulnerability.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

CVE-2019-16994

A flaw was found in the way the sit_init_net function in the Linux kernel handled resource cleanup on errors. This flaw allows an attacker to use the error conditions to crash the system.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Low

CVE-2019-20811

A flaw was found in the way the rx_queue_add_kobject and netdev_queue_add_kobject functions in the Linux kernel handled refcounting of certain objects. This flaw allows a local user who can trigger the error code path to use this vulnerability to disturb the integrity of the system.

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE-460 - Improper Cleanup on Thrown Exception

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Low

CVE-2020-10720

A flaw was found in the Linux kernel’s implementation of GRO. This flaw allows an attacker with local access to crash the system.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 214 products, the same list as for CVE-2015-1593

Threats

Impact Moderate

References

172 references

URL	Category
https://access.redhat.com/errata/RHSA-2019:3517	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/documentation/en-us/red…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1192519	external
https://bugzilla.redhat.com/show_bug.cgi?id=1656432	external
https://bugzilla.redhat.com/show_bug.cgi?id=1656986	external
https://bugzilla.redhat.com/show_bug.cgi?id=1660375	external
https://bugzilla.redhat.com/show_bug.cgi?id=1660385	external
https://bugzilla.redhat.com/show_bug.cgi?id=1663176	external
https://bugzilla.redhat.com/show_bug.cgi?id=1663179	external
https://bugzilla.redhat.com/show_bug.cgi?id=1664110	external
https://bugzilla.redhat.com/show_bug.cgi?id=1666106	external
https://bugzilla.redhat.com/show_bug.cgi?id=1671930	external
https://bugzilla.redhat.com/show_bug.cgi?id=1686373	external
https://bugzilla.redhat.com/show_bug.cgi?id=1689426	external
https://bugzilla.redhat.com/show_bug.cgi?id=1694143	external
https://bugzilla.redhat.com/show_bug.cgi?id=1698757	external
https://bugzilla.redhat.com/show_bug.cgi?id=1705937	external
https://bugzilla.redhat.com/show_bug.cgi?id=1709837	external
https://bugzilla.redhat.com/show_bug.cgi?id=1712072	external
https://bugzilla.redhat.com/show_bug.cgi?id=1712197	external
https://bugzilla.redhat.com/show_bug.cgi?id=1716992	external
https://bugzilla.redhat.com/show_bug.cgi?id=1719067	external
https://bugzilla.redhat.com/show_bug.cgi?id=1721034	external
https://bugzilla.redhat.com/show_bug.cgi?id=1727756	external
https://bugzilla.redhat.com/show_bug.cgi?id=1727857	external
https://bugzilla.redhat.com/show_bug.cgi?id=1729931	external
https://bugzilla.redhat.com/show_bug.cgi?id=1733874	external
https://bugzilla.redhat.com/show_bug.cgi?id=1746708	external
https://bugzilla.redhat.com/show_bug.cgi?id=1750813	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2015-1593	self
https://bugzilla.redhat.com/show_bug.cgi?id=1192519	external
https://www.cve.org/CVERecord?id=CVE-2015-1593	external
https://nvd.nist.gov/vuln/detail/CVE-2015-1593	external
https://access.redhat.com/security/cve/CVE-2018-16884	self
https://bugzilla.redhat.com/show_bug.cgi?id=1660375	external
https://www.cve.org/CVERecord?id=CVE-2018-16884	external
https://nvd.nist.gov/vuln/detail/CVE-2018-16884	external
https://access.redhat.com/security/cve/CVE-2018-19854	self
https://bugzilla.redhat.com/show_bug.cgi?id=1656986	external
https://www.cve.org/CVERecord?id=CVE-2018-19854	external
https://nvd.nist.gov/vuln/detail/CVE-2018-19854	external
https://access.redhat.com/security/cve/CVE-2018-19985	self
https://bugzilla.redhat.com/show_bug.cgi?id=1666106	external
https://www.cve.org/CVERecord?id=CVE-2018-19985	external
https://nvd.nist.gov/vuln/detail/CVE-2018-19985	external
https://access.redhat.com/security/cve/CVE-2018-20169	self
https://bugzilla.redhat.com/show_bug.cgi?id=1660385	external
https://www.cve.org/CVERecord?id=CVE-2018-20169	external
https://nvd.nist.gov/vuln/detail/CVE-2018-20169	external
https://access.redhat.com/security/cve/CVE-2019-3459	self
https://bugzilla.redhat.com/show_bug.cgi?id=1663176	external
https://www.cve.org/CVERecord?id=CVE-2019-3459	external
https://nvd.nist.gov/vuln/detail/CVE-2019-3459	external
https://access.redhat.com/security/cve/CVE-2019-3460	self
https://bugzilla.redhat.com/show_bug.cgi?id=1663179	external
https://www.cve.org/CVERecord?id=CVE-2019-3460	external
https://nvd.nist.gov/vuln/detail/CVE-2019-3460	external
https://access.redhat.com/security/cve/CVE-2019-3874	self
https://bugzilla.redhat.com/show_bug.cgi?id=1686373	external
https://www.cve.org/CVERecord?id=CVE-2019-3874	external
https://nvd.nist.gov/vuln/detail/CVE-2019-3874	external
https://discuss.kubernetes.io/t/kubernetes-securi…	external
https://lore.kernel.org/netdev/20190401113110.GA2…	external
https://access.redhat.com/security/cve/CVE-2019-3882	self
https://bugzilla.redhat.com/show_bug.cgi?id=1689426	external
https://www.cve.org/CVERecord?id=CVE-2019-3882	external
https://nvd.nist.gov/vuln/detail/CVE-2019-3882	external
https://access.redhat.com/security/cve/CVE-2019-3900	self
https://bugzilla.redhat.com/show_bug.cgi?id=1698757	external
https://www.cve.org/CVERecord?id=CVE-2019-3900	external
https://nvd.nist.gov/vuln/detail/CVE-2019-3900	external
https://access.redhat.com/security/cve/CVE-2019-5489	self
https://bugzilla.redhat.com/show_bug.cgi?id=1664110	external
https://www.cve.org/CVERecord?id=CVE-2019-5489	external
https://nvd.nist.gov/vuln/detail/CVE-2019-5489	external
https://access.redhat.com/security/cve/CVE-2019-7222	self
https://bugzilla.redhat.com/show_bug.cgi?id=1671930	external
https://www.cve.org/CVERecord?id=CVE-2019-7222	external
https://nvd.nist.gov/vuln/detail/CVE-2019-7222	external
https://access.redhat.com/security/cve/CVE-2019-9506	self
https://bugzilla.redhat.com/show_bug.cgi?id=1727857	external
https://www.cve.org/CVERecord?id=CVE-2019-9506	external
https://nvd.nist.gov/vuln/detail/CVE-2019-9506	external
https://access.redhat.com/security/cve/CVE-2019-10126	self
https://bugzilla.redhat.com/show_bug.cgi?id=1716992	external
https://www.cve.org/CVERecord?id=CVE-2019-10126	external
https://nvd.nist.gov/vuln/detail/CVE-2019-10126	external
https://access.redhat.com/security/cve/CVE-2019-10207	self
https://bugzilla.redhat.com/show_bug.cgi?id=1733874	external
https://www.cve.org/CVERecord?id=CVE-2019-10207	external
https://nvd.nist.gov/vuln/detail/CVE-2019-10207	external
https://access.redhat.com/security/cve/CVE-2019-10638	self
https://bugzilla.redhat.com/show_bug.cgi?id=1729931	external
https://www.cve.org/CVERecord?id=CVE-2019-10638	external
https://nvd.nist.gov/vuln/detail/CVE-2019-10638	external
https://arxiv.org/pdf/1906.10478.pdf	external
https://access.redhat.com/security/cve/CVE-2019-11599	self
https://bugzilla.redhat.com/show_bug.cgi?id=1705937	external
https://www.cve.org/CVERecord?id=CVE-2019-11599	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11599	external
https://access.redhat.com/security/cve/CVE-2019-11833	self
https://bugzilla.redhat.com/show_bug.cgi?id=1712072	external
https://www.cve.org/CVERecord?id=CVE-2019-11833	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11833	external
https://access.redhat.com/security/cve/CVE-2019-11884	self
https://bugzilla.redhat.com/show_bug.cgi?id=1709837	external
https://www.cve.org/CVERecord?id=CVE-2019-11884	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11884	external
https://access.redhat.com/security/cve/CVE-2019-12382	self
https://bugzilla.redhat.com/show_bug.cgi?id=1715554	external
https://www.cve.org/CVERecord?id=CVE-2019-12382	external
https://nvd.nist.gov/vuln/detail/CVE-2019-12382	external
https://access.redhat.com/security/cve/CVE-2019-13233	self
https://bugzilla.redhat.com/show_bug.cgi?id=1727756	external
https://www.cve.org/CVERecord?id=CVE-2019-13233	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13233	external
https://access.redhat.com/security/cve/CVE-2019-13648	self
https://bugzilla.redhat.com/show_bug.cgi?id=1735630	external
https://www.cve.org/CVERecord?id=CVE-2019-13648	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13648	external
https://access.redhat.com/security/cve/CVE-2019-14821	self
https://bugzilla.redhat.com/show_bug.cgi?id=1746708	external
https://www.cve.org/CVERecord?id=CVE-2019-14821	external
https://nvd.nist.gov/vuln/detail/CVE-2019-14821	external
https://access.redhat.com/security/cve/CVE-2019-15214	self
https://bugzilla.redhat.com/show_bug.cgi?id=1743591	external
https://www.cve.org/CVERecord?id=CVE-2019-15214	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15214	external
https://access.redhat.com/security/cve/CVE-2019-15666	self
https://bugzilla.redhat.com/show_bug.cgi?id=1747334	external
https://www.cve.org/CVERecord?id=CVE-2019-15666	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15666	external
https://access.redhat.com/security/cve/CVE-2019-15916	self
https://bugzilla.redhat.com/show_bug.cgi?id=1750813	external
https://www.cve.org/CVERecord?id=CVE-2019-15916	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15916	external
https://access.redhat.com/security/cve/CVE-2019-15919	self
https://bugzilla.redhat.com/show_bug.cgi?id=1750410	external
https://www.cve.org/CVERecord?id=CVE-2019-15919	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15919	external
https://access.redhat.com/security/cve/CVE-2019-15920	self
https://bugzilla.redhat.com/show_bug.cgi?id=1760864	external
https://www.cve.org/CVERecord?id=CVE-2019-15920	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15920	external
https://access.redhat.com/security/cve/CVE-2019-15921	self
https://bugzilla.redhat.com/show_bug.cgi?id=1760958	external
https://www.cve.org/CVERecord?id=CVE-2019-15921	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15921	external
https://access.redhat.com/security/cve/CVE-2019-15924	self
https://bugzilla.redhat.com/show_bug.cgi?id=1763869	external
https://www.cve.org/CVERecord?id=CVE-2019-15924	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15924	external
https://access.redhat.com/security/cve/CVE-2019-15927	self
https://bugzilla.redhat.com/show_bug.cgi?id=1759059	external
https://www.cve.org/CVERecord?id=CVE-2019-15927	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15927	external
https://access.redhat.com/security/cve/CVE-2019-16994	self
https://bugzilla.redhat.com/show_bug.cgi?id=1759681	external
https://www.cve.org/CVERecord?id=CVE-2019-16994	external
https://nvd.nist.gov/vuln/detail/CVE-2019-16994	external
https://access.redhat.com/security/cve/CVE-2019-20811	self
https://bugzilla.redhat.com/show_bug.cgi?id=1846439	external
https://www.cve.org/CVERecord?id=CVE-2019-20811	external
https://nvd.nist.gov/vuln/detail/CVE-2019-20811	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2020-10720	self
https://bugzilla.redhat.com/show_bug.cgi?id=1781204	external
https://www.cve.org/CVERecord?id=CVE-2020-10720	external
https://nvd.nist.gov/vuln/detail/CVE-2020-10720	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external

Acknowledgments

Virtuozzo Evgenii Shatokhin Vasily Averin

Red Hat Andrea Spagnolo Matteo Croce Natale Vinto

Red Hat Inc. Alex Williamson

Red Hat Inc. Jason Wang

Google Felix Wilhelm

ADLab of Venustech huangwen

Red Hat Engineering Andrea Arcangeli

Google.com Matt Delco

JSON

To clipboard

Loading 1.9 MB of JSON…

CVE-2019-5489 (GCVE-0-2019-5489)

Vulnerability from cvelistv5 – Published: 2019-01-07 18:00 – Updated: 2024-08-04 19:54

Summary

The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

32 references

URL	Tags
http://www.securityfocus.com/bid/106478	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.debian.org/security/2019/dsa-4465	vendor-advisoryx_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://seclists.org/bugtraq/2019/Jun/26	mailing-listx_refsource_BUGTRAQ
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2473	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2808	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2837	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2809	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3309	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3517	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3967	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:4058	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:4057	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:4056	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:4159	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:4164	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:4255	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0204	vendor-advisoryx_refsource_REDHAT
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
https://www.theregister.co.uk/2019/01/05/boffins_…	x_refsource_MISC
https://bugzilla.suse.com/show_bug.cgi?id=1120843	x_refsource_MISC
https://github.com/torvalds/linux/commit/574823bf…	x_refsource_MISC
https://arxiv.org/abs/1901.01161	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2019030…	x_refsource_CONFIRM
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_MISC
http://www.huawei.com/en/psirt/security-advisorie…	x_refsource_CONFIRM

Date Public

2019-01-07 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T19:54:53.490Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "106478",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106478"
          },
          {
            "name": "openSUSE-SU-2019:1479",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html"
          },
          {
            "name": "DSA-4465",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4465"
          },
          {
            "name": "[debian-lts-announce] 20190617 [SECURITY] [DLA 1823-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00010.html"
          },
          {
            "name": "[debian-lts-announce] 20190618 [SECURITY] [DLA 1824-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html"
          },
          {
            "name": "openSUSE-SU-2019:1570",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html"
          },
          {
            "name": "20190618 [SECURITY] [DSA 4465-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Jun/26"
          },
          {
            "name": "openSUSE-SU-2019:1579",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
          },
          {
            "name": "RHSA-2019:2043",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2043"
          },
          {
            "name": "RHSA-2019:2029",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2029"
          },
          {
            "name": "RHSA-2019:2473",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2473"
          },
          {
            "name": "RHSA-2019:2808",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2808"
          },
          {
            "name": "RHSA-2019:2837",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2837"
          },
          {
            "name": "RHSA-2019:2809",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2809"
          },
          {
            "name": "RHSA-2019:3309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3309"
          },
          {
            "name": "RHSA-2019:3517",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3517"
          },
          {
            "name": "RHSA-2019:3967",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3967"
          },
          {
            "name": "RHSA-2019:4058",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4058"
          },
          {
            "name": "RHSA-2019:4057",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4057"
          },
          {
            "name": "RHSA-2019:4056",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4056"
          },
          {
            "name": "RHSA-2019:4159",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4159"
          },
          {
            "name": "RHSA-2019:4164",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4164"
          },
          {
            "name": "RHSA-2019:4255",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4255"
          },
          {
            "name": "RHSA-2020:0204",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0204"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.theregister.co.uk/2019/01/05/boffins_beat_page_cache/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1120843"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/574823bfab82d9d8fa47f422778043fbb4b4f50e"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://arxiv.org/abs/1901.01161"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190307-0001/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=574823bfab82d9d8fa47f422778043fbb4b4f50e"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-pagecache-en"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-01-07T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-15T02:23:05.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "106478",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106478"
        },
        {
          "name": "openSUSE-SU-2019:1479",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html"
        },
        {
          "name": "DSA-4465",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4465"
        },
        {
          "name": "[debian-lts-announce] 20190617 [SECURITY] [DLA 1823-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00010.html"
        },
        {
          "name": "[debian-lts-announce] 20190618 [SECURITY] [DLA 1824-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html"
        },
        {
          "name": "openSUSE-SU-2019:1570",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html"
        },
        {
          "name": "20190618 [SECURITY] [DSA 4465-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Jun/26"
        },
        {
          "name": "openSUSE-SU-2019:1579",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
        },
        {
          "name": "RHSA-2019:2043",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2043"
        },
        {
          "name": "RHSA-2019:2029",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2029"
        },
        {
          "name": "RHSA-2019:2473",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2473"
        },
        {
          "name": "RHSA-2019:2808",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2808"
        },
        {
          "name": "RHSA-2019:2837",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2837"
        },
        {
          "name": "RHSA-2019:2809",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2809"
        },
        {
          "name": "RHSA-2019:3309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3309"
        },
        {
          "name": "RHSA-2019:3517",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3517"
        },
        {
          "name": "RHSA-2019:3967",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3967"
        },
        {
          "name": "RHSA-2019:4058",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4058"
        },
        {
          "name": "RHSA-2019:4057",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4057"
        },
        {
          "name": "RHSA-2019:4056",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4056"
        },
        {
          "name": "RHSA-2019:4159",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4159"
        },
        {
          "name": "RHSA-2019:4164",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4164"
        },
        {
          "name": "RHSA-2019:4255",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4255"
        },
        {
          "name": "RHSA-2020:0204",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0204"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.theregister.co.uk/2019/01/05/boffins_beat_page_cache/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1120843"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/574823bfab82d9d8fa47f422778043fbb4b4f50e"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://arxiv.org/abs/1901.01161"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190307-0001/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=574823bfab82d9d8fa47f422778043fbb4b4f50e"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-pagecache-en"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-5489",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "106478",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106478"
            },
            {
              "name": "openSUSE-SU-2019:1479",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html"
            },
            {
              "name": "DSA-4465",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4465"
            },
            {
              "name": "[debian-lts-announce] 20190617 [SECURITY] [DLA 1823-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00010.html"
            },
            {
              "name": "[debian-lts-announce] 20190618 [SECURITY] [DLA 1824-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html"
            },
            {
              "name": "openSUSE-SU-2019:1570",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html"
            },
            {
              "name": "20190618 [SECURITY] [DSA 4465-1] linux security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Jun/26"
            },
            {
              "name": "openSUSE-SU-2019:1579",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
            },
            {
              "name": "RHSA-2019:2043",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2043"
            },
            {
              "name": "RHSA-2019:2029",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2029"
            },
            {
              "name": "RHSA-2019:2473",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2473"
            },
            {
              "name": "RHSA-2019:2808",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2808"
            },
            {
              "name": "RHSA-2019:2837",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2837"
            },
            {
              "name": "RHSA-2019:2809",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2809"
            },
            {
              "name": "RHSA-2019:3309",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3309"
            },
            {
              "name": "RHSA-2019:3517",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3517"
            },
            {
              "name": "RHSA-2019:3967",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3967"
            },
            {
              "name": "RHSA-2019:4058",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4058"
            },
            {
              "name": "RHSA-2019:4057",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4057"
            },
            {
              "name": "RHSA-2019:4056",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4056"
            },
            {
              "name": "RHSA-2019:4159",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4159"
            },
            {
              "name": "RHSA-2019:4164",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4164"
            },
            {
              "name": "RHSA-2019:4255",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4255"
            },
            {
              "name": "RHSA-2020:0204",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0204"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "name": "https://www.theregister.co.uk/2019/01/05/boffins_beat_page_cache/",
              "refsource": "MISC",
              "url": "https://www.theregister.co.uk/2019/01/05/boffins_beat_page_cache/"
            },
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1120843",
              "refsource": "MISC",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1120843"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/574823bfab82d9d8fa47f422778043fbb4b4f50e",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/574823bfab82d9d8fa47f422778043fbb4b4f50e"
            },
            {
              "name": "https://arxiv.org/abs/1901.01161",
              "refsource": "MISC",
              "url": "https://arxiv.org/abs/1901.01161"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190307-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190307-0001/"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=574823bfab82d9d8fa47f422778043fbb4b4f50e",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=574823bfab82d9d8fa47f422778043fbb4b4f50e"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-pagecache-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-pagecache-en"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-5489",
    "datePublished": "2019-01-07T18:00:00.000Z",
    "dateReserved": "2019-01-07T00:00:00.000Z",
    "dateUpdated": "2024-08-04T19:54:53.490Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-7222 (GCVE-0-2019-7222)

Vulnerability from cvelistv5 – Published: 2019-03-17 18:52 – Updated: 2024-08-04 20:46

Summary

The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

25 references

URL	Tags
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://packetstormsecurity.com/files/151712/KVM-k…	x_refsource_MISC
http://www.securityfocus.com/bid/106963	vdb-entryx_refsource_BID
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://github.com/torvalds/linux/commits/master/…	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2019/02/18/2	mailing-listx_refsource_MLIST
https://bugs.chromium.org/p/project-zero/issues/d…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3932-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3932-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3930-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3931-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3933-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3931-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3930-2/	vendor-advisoryx_refsource_UBUNTU
https://security.netapp.com/advisory/ntap-2019040…	x_refsource_CONFIRM
https://usn.ubuntu.com/3933-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3309	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3517	vendor-advisoryx_refsource_REDHAT

Date Public

2019-01-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:46:46.063Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2019-164946aa7f",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KDOXCX3QFVWYXH5CQMGDDE7H6MUG5XGG/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/151712/KVM-kvm_inject_page_fault-Uninitialized-Memory-Leak.html"
          },
          {
            "name": "106963",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106963"
          },
          {
            "name": "FEDORA-2019-3da64f3e61",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y2HMABEMJDPA6LPCBE5WIEZXUKY7DLTN/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commits/master/arch/x86/kvm"
          },
          {
            "name": "SUSE-SA-2019:0203-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00042.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=353c0956a618a07ba4bbe7ad00ff29fe70e8412a"
          },
          {
            "name": "[oss-security] Linux kernel: three KVM bugs (CVE-2019-6974, CVE-2019-7221, CVE-2019-7222)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/02/18/2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1759"
          },
          {
            "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
          },
          {
            "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
          },
          {
            "name": "USN-3932-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3932-1/"
          },
          {
            "name": "USN-3932-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3932-2/"
          },
          {
            "name": "USN-3930-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3930-1/"
          },
          {
            "name": "USN-3931-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3931-1/"
          },
          {
            "name": "USN-3933-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3933-2/"
          },
          {
            "name": "USN-3931-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3931-2/"
          },
          {
            "name": "USN-3930-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3930-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190404-0002/"
          },
          {
            "name": "USN-3933-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3933-1/"
          },
          {
            "name": "[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html"
          },
          {
            "name": "RHSA-2019:2043",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2043"
          },
          {
            "name": "RHSA-2019:2029",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2029"
          },
          {
            "name": "RHSA-2019:3309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3309"
          },
          {
            "name": "RHSA-2019:3517",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3517"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-01-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-06T00:07:14.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "FEDORA-2019-164946aa7f",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KDOXCX3QFVWYXH5CQMGDDE7H6MUG5XGG/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/151712/KVM-kvm_inject_page_fault-Uninitialized-Memory-Leak.html"
        },
        {
          "name": "106963",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106963"
        },
        {
          "name": "FEDORA-2019-3da64f3e61",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y2HMABEMJDPA6LPCBE5WIEZXUKY7DLTN/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commits/master/arch/x86/kvm"
        },
        {
          "name": "SUSE-SA-2019:0203-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00042.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=353c0956a618a07ba4bbe7ad00ff29fe70e8412a"
        },
        {
          "name": "[oss-security] Linux kernel: three KVM bugs (CVE-2019-6974, CVE-2019-7221, CVE-2019-7222)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/02/18/2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1759"
        },
        {
          "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
        },
        {
          "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
        },
        {
          "name": "USN-3932-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3932-1/"
        },
        {
          "name": "USN-3932-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3932-2/"
        },
        {
          "name": "USN-3930-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3930-1/"
        },
        {
          "name": "USN-3931-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3931-1/"
        },
        {
          "name": "USN-3933-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3933-2/"
        },
        {
          "name": "USN-3931-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3931-2/"
        },
        {
          "name": "USN-3930-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3930-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190404-0002/"
        },
        {
          "name": "USN-3933-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3933-1/"
        },
        {
          "name": "[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html"
        },
        {
          "name": "RHSA-2019:2043",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2043"
        },
        {
          "name": "RHSA-2019:2029",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2029"
        },
        {
          "name": "RHSA-2019:3309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3309"
        },
        {
          "name": "RHSA-2019:3517",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3517"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-7222",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2019-164946aa7f",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KDOXCX3QFVWYXH5CQMGDDE7H6MUG5XGG/"
            },
            {
              "name": "http://packetstormsecurity.com/files/151712/KVM-kvm_inject_page_fault-Uninitialized-Memory-Leak.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/151712/KVM-kvm_inject_page_fault-Uninitialized-Memory-Leak.html"
            },
            {
              "name": "106963",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106963"
            },
            {
              "name": "FEDORA-2019-3da64f3e61",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y2HMABEMJDPA6LPCBE5WIEZXUKY7DLTN/"
            },
            {
              "name": "https://github.com/torvalds/linux/commits/master/arch/x86/kvm",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commits/master/arch/x86/kvm"
            },
            {
              "name": "SUSE-SA-2019:0203-1",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00042.html"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=353c0956a618a07ba4bbe7ad00ff29fe70e8412a",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=353c0956a618a07ba4bbe7ad00ff29fe70e8412a"
            },
            {
              "name": "[oss-security] Linux kernel: three KVM bugs (CVE-2019-6974, CVE-2019-7221, CVE-2019-7222)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/02/18/2"
            },
            {
              "name": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1759",
              "refsource": "CONFIRM",
              "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1759"
            },
            {
              "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
            },
            {
              "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
            },
            {
              "name": "USN-3932-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3932-1/"
            },
            {
              "name": "USN-3932-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3932-2/"
            },
            {
              "name": "USN-3930-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3930-1/"
            },
            {
              "name": "USN-3931-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3931-1/"
            },
            {
              "name": "USN-3933-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3933-2/"
            },
            {
              "name": "USN-3931-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3931-2/"
            },
            {
              "name": "USN-3930-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3930-2/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190404-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190404-0002/"
            },
            {
              "name": "USN-3933-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3933-1/"
            },
            {
              "name": "[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html"
            },
            {
              "name": "RHSA-2019:2043",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2043"
            },
            {
              "name": "RHSA-2019:2029",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2029"
            },
            {
              "name": "RHSA-2019:3309",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3309"
            },
            {
              "name": "RHSA-2019:3517",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3517"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-7222",
    "datePublished": "2019-03-17T18:52:17.000Z",
    "dateReserved": "2019-01-30T00:00:00.000Z",
    "dateUpdated": "2024-08-04T20:46:46.063Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-9506 (GCVE-0-2019-9506)

Vulnerability from cvelistv5 – Published: 2019-08-14 16:27 – Updated: 2024-09-16 19:14

Title

Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation

Summary

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.

Severity

7.6 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

CWE

CWE-310 - Cryptographic Issues

Assigner

certcc mitre root

References

30 references

URL	Tags
https://www.kb.cert.org/vuls/id/918987/	third-party-advisoryx_refsource_CERT-VN
http://www.cs.ox.ac.uk/publications/publication12…	x_refsource_MISC
https://www.usenix.org/conference/usenixsecurity1…	x_refsource_MISC
https://www.bluetooth.com/security/statement-key-…	x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2019/Aug/14	mailing-listx_refsource_FULLDISC
http://seclists.org/fulldisclosure/2019/Aug/11	mailing-listx_refsource_FULLDISC
http://seclists.org/fulldisclosure/2019/Aug/13	mailing-listx_refsource_FULLDISC
http://seclists.org/fulldisclosure/2019/Aug/15	mailing-listx_refsource_FULLDISC
http://www.huawei.com/en/psirt/security-advisorie…	x_refsource_CONFIRM
https://usn.ubuntu.com/4115-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4118-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4147-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:2975	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:3076	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3055	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3089	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3187	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3165	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3217	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3220	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3231	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3218	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3309	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3517	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0204	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
Bluetooth	BR/EDR	Affected: 5.1 , ≤ 5.1 (custom)

Date Public

2019-08-14 00:00

Credits

Daniele Antonioli‚ Nils Ole Tippenhauer, Kasper Rasmussen

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:54:44.303Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "VU#918987",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/918987/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.cs.ox.ac.uk/publications/publication12404-abstract.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.usenix.org/conference/usenixsecurity19/presentation/antonioli"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.bluetooth.com/security/statement-key-negotiation-of-bluetooth/"
          },
          {
            "name": "20190816 APPLE-SA-2019-8-13-3 Additional information for APPLE-SA-2019-7-22-4 watchOS 5.3",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2019/Aug/14"
          },
          {
            "name": "20190816 APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2019/Aug/11"
          },
          {
            "name": "20190816 APPLE-SA-2019-8-13-2 Additional information for APPLE-SA-2019-7-22-1 iOS 12.4",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2019/Aug/13"
          },
          {
            "name": "20190816 APPLE-SA-2019-8-13-4 Additional information for APPLE-SA-2019-7-22-5 tvOS 12.4",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2019/Aug/15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190828-01-knob-en"
          },
          {
            "name": "USN-4115-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4115-1/"
          },
          {
            "name": "USN-4118-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4118-1/"
          },
          {
            "name": "[debian-lts-announce] 20190914 [SECURITY] [DLA 1919-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html"
          },
          {
            "name": "[debian-lts-announce] 20190915 [SECURITY] [DLA 1919-2] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html"
          },
          {
            "name": "[debian-lts-announce] 20190925 [SECURITY] [DLA 1930-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html"
          },
          {
            "name": "USN-4147-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4147-1/"
          },
          {
            "name": "RHSA-2019:2975",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2975"
          },
          {
            "name": "openSUSE-SU-2019:2307",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html"
          },
          {
            "name": "openSUSE-SU-2019:2308",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html"
          },
          {
            "name": "RHSA-2019:3076",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3076"
          },
          {
            "name": "RHSA-2019:3055",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3055"
          },
          {
            "name": "RHSA-2019:3089",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3089"
          },
          {
            "name": "RHSA-2019:3187",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3187"
          },
          {
            "name": "RHSA-2019:3165",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3165"
          },
          {
            "name": "RHSA-2019:3217",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3217"
          },
          {
            "name": "RHSA-2019:3220",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3220"
          },
          {
            "name": "RHSA-2019:3231",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3231"
          },
          {
            "name": "RHSA-2019:3218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3218"
          },
          {
            "name": "RHSA-2019:3309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3309"
          },
          {
            "name": "RHSA-2019:3517",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3517"
          },
          {
            "name": "RHSA-2020:0204",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0204"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "N/A"
          ],
          "product": "BR/EDR",
          "vendor": "Bluetooth",
          "versions": [
            {
              "lessThanOrEqual": "5.1",
              "status": "affected",
              "version": "5.1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Daniele Antonioli\u201a Nils Ole Tippenhauer, Kasper Rasmussen"
        }
      ],
      "datePublic": "2019-08-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka \"KNOB\") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-310",
              "description": "CWE-310 Cryptographic Issues",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-30T10:06:23.000Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "VU#918987",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/918987/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.cs.ox.ac.uk/publications/publication12404-abstract.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.usenix.org/conference/usenixsecurity19/presentation/antonioli"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.bluetooth.com/security/statement-key-negotiation-of-bluetooth/"
        },
        {
          "name": "20190816 APPLE-SA-2019-8-13-3 Additional information for APPLE-SA-2019-7-22-4 watchOS 5.3",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2019/Aug/14"
        },
        {
          "name": "20190816 APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2019/Aug/11"
        },
        {
          "name": "20190816 APPLE-SA-2019-8-13-2 Additional information for APPLE-SA-2019-7-22-1 iOS 12.4",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2019/Aug/13"
        },
        {
          "name": "20190816 APPLE-SA-2019-8-13-4 Additional information for APPLE-SA-2019-7-22-5 tvOS 12.4",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2019/Aug/15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190828-01-knob-en"
        },
        {
          "name": "USN-4115-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4115-1/"
        },
        {
          "name": "USN-4118-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4118-1/"
        },
        {
          "name": "[debian-lts-announce] 20190914 [SECURITY] [DLA 1919-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html"
        },
        {
          "name": "[debian-lts-announce] 20190915 [SECURITY] [DLA 1919-2] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html"
        },
        {
          "name": "[debian-lts-announce] 20190925 [SECURITY] [DLA 1930-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html"
        },
        {
          "name": "USN-4147-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4147-1/"
        },
        {
          "name": "RHSA-2019:2975",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2975"
        },
        {
          "name": "openSUSE-SU-2019:2307",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html"
        },
        {
          "name": "openSUSE-SU-2019:2308",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html"
        },
        {
          "name": "RHSA-2019:3076",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3076"
        },
        {
          "name": "RHSA-2019:3055",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3055"
        },
        {
          "name": "RHSA-2019:3089",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3089"
        },
        {
          "name": "RHSA-2019:3187",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3187"
        },
        {
          "name": "RHSA-2019:3165",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3165"
        },
        {
          "name": "RHSA-2019:3217",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3217"
        },
        {
          "name": "RHSA-2019:3220",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3220"
        },
        {
          "name": "RHSA-2019:3231",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3231"
        },
        {
          "name": "RHSA-2019:3218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3218"
        },
        {
          "name": "RHSA-2019:3309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3309"
        },
        {
          "name": "RHSA-2019:3517",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3517"
        },
        {
          "name": "RHSA-2020:0204",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0204"
        }
      ],
      "source": {
        "advisory": "VU#918987",
        "defect": [
          "VU#918987"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation",
      "workarounds": [
        {
          "lang": "en",
          "value": "Bluetooth SIG Expedited Errata Correction 11838"
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.7"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "AKA": "KNOB",
          "ASSIGNER": "cert@cert.org",
          "DATE_PUBLIC": "2019-08-14",
          "ID": "CVE-2019-9506",
          "STATE": "PUBLIC",
          "TITLE": "Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BR/EDR",
                      "version": {
                        "version_data": [
                          {
                            "platform": "N/A",
                            "version_affected": "\u003c=",
                            "version_name": "5.1",
                            "version_value": "5.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Bluetooth"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Daniele Antonioli\u201a Nils Ole Tippenhauer, Kasper Rasmussen"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka \"KNOB\") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.7"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-310 Cryptographic Issues"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "VU#918987",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/918987/"
            },
            {
              "name": "http://www.cs.ox.ac.uk/publications/publication12404-abstract.html",
              "refsource": "MISC",
              "url": "http://www.cs.ox.ac.uk/publications/publication12404-abstract.html"
            },
            {
              "name": "https://www.usenix.org/conference/usenixsecurity19/presentation/antonioli",
              "refsource": "MISC",
              "url": "https://www.usenix.org/conference/usenixsecurity19/presentation/antonioli"
            },
            {
              "name": "https://www.bluetooth.com/security/statement-key-negotiation-of-bluetooth/",
              "refsource": "CONFIRM",
              "url": "https://www.bluetooth.com/security/statement-key-negotiation-of-bluetooth/"
            },
            {
              "name": "20190816 APPLE-SA-2019-8-13-3 Additional information for APPLE-SA-2019-7-22-4 watchOS 5.3",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2019/Aug/14"
            },
            {
              "name": "20190816 APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2019/Aug/11"
            },
            {
              "name": "20190816 APPLE-SA-2019-8-13-2 Additional information for APPLE-SA-2019-7-22-1 iOS 12.4",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2019/Aug/13"
            },
            {
              "name": "20190816 APPLE-SA-2019-8-13-4 Additional information for APPLE-SA-2019-7-22-5 tvOS 12.4",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2019/Aug/15"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190828-01-knob-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190828-01-knob-en"
            },
            {
              "name": "USN-4115-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4115-1/"
            },
            {
              "name": "USN-4118-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4118-1/"
            },
            {
              "name": "[debian-lts-announce] 20190914 [SECURITY] [DLA 1919-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html"
            },
            {
              "name": "[debian-lts-announce] 20190915 [SECURITY] [DLA 1919-2] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html"
            },
            {
              "name": "[debian-lts-announce] 20190925 [SECURITY] [DLA 1930-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html"
            },
            {
              "name": "USN-4147-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4147-1/"
            },
            {
              "name": "RHSA-2019:2975",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2975"
            },
            {
              "name": "openSUSE-SU-2019:2307",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html"
            },
            {
              "name": "openSUSE-SU-2019:2308",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html"
            },
            {
              "name": "RHSA-2019:3076",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3076"
            },
            {
              "name": "RHSA-2019:3055",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3055"
            },
            {
              "name": "RHSA-2019:3089",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3089"
            },
            {
              "name": "RHSA-2019:3187",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3187"
            },
            {
              "name": "RHSA-2019:3165",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3165"
            },
            {
              "name": "RHSA-2019:3217",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3217"
            },
            {
              "name": "RHSA-2019:3220",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3220"
            },
            {
              "name": "RHSA-2019:3231",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3231"
            },
            {
              "name": "RHSA-2019:3218",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3218"
            },
            {
              "name": "RHSA-2019:3309",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3309"
            },
            {
              "name": "RHSA-2019:3517",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3517"
            },
            {
              "name": "RHSA-2020:0204",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0204"
            }
          ]
        },
        "source": {
          "advisory": "VU#918987",
          "defect": [
            "VU#918987"
          ],
          "discovery": "EXTERNAL"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "Bluetooth SIG Expedited Errata Correction 11838"
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2019-9506",
    "datePublished": "2019-08-14T16:27:45.059Z",
    "dateReserved": "2019-03-01T00:00:00.000Z",
    "dateUpdated": "2024-09-16T19:14:13.573Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-10720 (GCVE-0-2020-10720)

Vulnerability from cvelistv5 – Published: 2020-09-03 17:49 – Updated: 2024-08-04 11:14

Summary

A flaw was found in the Linux kernel's implementation of GRO in versions before 5.2. This flaw allows an attacker with local access to crash the system.

Severity

No CVSS data available.

CWE

CWE-416

Assigner

redhat redhat root

References

2 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1781204	x_refsource_MISC
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	Kernel	Affected: Kernel versions before 5.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:14:14.213Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1781204"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a4270d6795b0580287453ea55974d948393e66ef"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Kernel versions before 5.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Linux kernel\u0027s implementation of GRO in versions before 5.2. This flaw allows an attacker with local access to crash the system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-09-03T18:58:54.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1781204"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a4270d6795b0580287453ea55974d948393e66ef"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2020-10720",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Kernel",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Kernel versions before 5.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A flaw was found in the Linux kernel\u0027s implementation of GRO in versions before 5.2. This flaw allows an attacker with local access to crash the system."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-416"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1781204",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1781204"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a4270d6795b0580287453ea55974d948393e66ef",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a4270d6795b0580287453ea55974d948393e66ef"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2020-10720",
    "datePublished": "2020-09-03T17:49:04.000Z",
    "dateReserved": "2020-03-20T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:14:14.213Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2019_3517

CVE-2019-5489 (GCVE-0-2019-5489)

CVE-2019-7222 (GCVE-0-2019-7222)

CVE-2019-9506 (GCVE-0-2019-9506)

CVE-2020-10720 (GCVE-0-2020-10720)

Tags

Sightings

Nomenclature

Related by attack behaviour