GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

RHSA-2021:1578

Vulnerability from csaf_redhat - Published: 2021-05-18 15:49 - Updated: 2026-08-07 02:39
Summary
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Severity
Important
Notes
Topic: An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Integer overflow in Intel(R) Graphics Drivers (CVE-2020-12362) * kernel: memory leak in sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c (CVE-2019-18811) * kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver (CVE-2019-19523) * kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (CVE-2019-19528) * kernel: possible out of bounds write in kbd_keycode of keyboard.c (CVE-2020-0431) * kernel: DoS by corrupting mountpoint reference counter (CVE-2020-12114) * kernel: use-after-free in usb_sg_cancel function in drivers/usb/core/message.c (CVE-2020-12464) * kernel: buffer uses out of index in ext3/4 filesystem (CVE-2020-14314) * kernel: Use After Free vulnerability in cgroup BPF component (CVE-2020-14356) * kernel: NULL pointer dereference in serial8250_isa_init_ports function in drivers/tty/serial/8250/8250_core.c (CVE-2020-15437) * kernel: umask not applied on filesystem without ACL support (CVE-2020-24394) * kernel: TOCTOU mismatch in the NFS client code (CVE-2020-25212) * kernel: incomplete permission checking for access to rbd devices (CVE-2020-25284) * kernel: race condition between hugetlb sysctl handlers in mm/hugetlb.c (CVE-2020-25285) * kernel: improper input validation in ppp_cp_parse_cr function leads to memory corruption and read overflow (CVE-2020-25643) * kernel: perf_event_parse_addr_filter memory (CVE-2020-25704) * kernel: use-after-free in kernel midi subsystem (CVE-2020-27786) * kernel: child process is able to access parent mm through hfi dev file handle (CVE-2020-27835) * kernel: slab-out-of-bounds read in fbcon (CVE-2020-28974) * kernel: fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent (CVE-2020-35508) * kernel: fuse: fuse_do_getattr() calls make_bad_inode() in inappropriate situations (CVE-2020-36322) * kernel: use after free in tun_get_user of tun.c could lead to local escalation of privilege (CVE-2021-0342) * kernel: NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs in drivers/media/usb/gspca/ov519.c (CVE-2020-11608) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

A flaw was found in the Linux kernel’s sof_set_get_large_ctrl_data function, in the way it handled memory cleanup in a specific error path. A local attacker could use this flaw to crash the system.

CWE-400 - Uncontrolled Resource Consumption
Affected products
Product Identifier Version Remediation
Unresolved product id: BaseOS-8.4.0.GA:bpftool-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:bpftool-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:bpftool-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:bpftool-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:bpftool-debuginfo-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:bpftool-debuginfo-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:bpftool-debuginfo-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:bpftool-debuginfo-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-0:4.18.0-305.el8.src
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-abi-stablelists-0:4.18.0-305.el8.noarch
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-core-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-core-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-core-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-core-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-core-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-core-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-core-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-core-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-debuginfo-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-debuginfo-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-debuginfo-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-debuginfo-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-devel-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-devel-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-devel-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-devel-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-modules-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-modules-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-modules-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-modules-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-modules-extra-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-modules-extra-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-modules-extra-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debuginfo-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debuginfo-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debuginfo-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debuginfo-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debuginfo-common-aarch64-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debuginfo-common-ppc64le-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debuginfo-common-s390x-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-debuginfo-common-x86_64-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-devel-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-devel-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-devel-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-devel-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-doc-0:4.18.0-305.el8.noarch
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-modules-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-modules-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-modules-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-modules-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-modules-extra-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-modules-extra-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-modules-extra-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-modules-extra-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-tools-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-tools-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-tools-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-tools-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-tools-debuginfo-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-tools-debuginfo-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-tools-debuginfo-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-tools-debuginfo-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-tools-libs-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-tools-libs-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-tools-libs-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-zfcpdump-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-zfcpdump-core-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-zfcpdump-debuginfo-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-zfcpdump-devel-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-zfcpdump-modules-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:kernel-zfcpdump-modules-extra-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:perf-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:perf-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:perf-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:perf-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:perf-debuginfo-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:perf-debuginfo-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:perf-debuginfo-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:perf-debuginfo-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:python3-perf-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:python3-perf-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:python3-perf-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:python3-perf-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:python3-perf-debuginfo-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:python3-perf-debuginfo-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:python3-perf-debuginfo-0:4.18.0-305.el8.s390x
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.4.0.GA:python3-perf-debuginfo-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:bpftool-debuginfo-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:bpftool-debuginfo-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:bpftool-debuginfo-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:kernel-debug-debuginfo-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:kernel-debug-debuginfo-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:kernel-debug-debuginfo-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:kernel-debuginfo-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:kernel-debuginfo-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:kernel-debuginfo-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:kernel-debuginfo-common-aarch64-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:kernel-debuginfo-common-ppc64le-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:kernel-debuginfo-common-x86_64-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:kernel-tools-debuginfo-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:kernel-tools-debuginfo-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:kernel-tools-debuginfo-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:kernel-tools-libs-devel-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:kernel-tools-libs-devel-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:perf-debuginfo-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:perf-debuginfo-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:perf-debuginfo-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:python3-perf-debuginfo-0:4.18.0-305.el8.aarch64
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:python3-perf-debuginfo-0:4.18.0-305.el8.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: CRB-8.4.0.GA:python3-perf-debuginfo-0:4.18.0-305.el8.x86_64
Vendor Fix fix
Workaround
Threats
Impact Moderate

A flaw was found in the Linux kernel’s implementation for ADU devices from Ontrak Control Systems, where an attacker with administrative privileges and access to a local account could pre-groom the memory and physically disconnect or unload a module. The attacker must be able to access either of these two events to trigger the use-after-free, and then race the access to the use-after-free, to create a situation where key USB structs can be manipulated into corrupting memory.

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A use-after-free flaw was found in iowarrior_disconnect in iowarrior USB driver module were a flag was simultaneously modified causing a race between a device open and disconnect. This flaw could allow a physical attacker to cause a denial of service (DoS) attack. This vulnerability could even lead to a kernel information leak problem.

CWE-416 - Use After Free
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A flaw out of bounds write in the Linux kernel human interface devices subsystem was found in the way user calls find key code by index. A local user could use this flaw to crash the system or escalate privileges on the system.

CWE-284 - Improper Access Control
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A flaw was found in the way the ov519 driver in the Linux kernel handled certain types of USB descriptors. This flaw allows an attacker with the ability to induce the error conditions to crash the system.

CWE-476 - NULL Pointer Dereference
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Low

A flaw was found in the Linux kernel’s implementation of the pivot_root syscall. This flaw allows a local privileged user (root outside or root inside a privileged container) to exploit a race condition to manipulate the reference count of the root filesystem. To be able to abuse this flaw, the process or user calling pivot_root must have advanced permissions. The highest threat from this vulnerability is to system availability.

CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A flaw was found in the Linux kernel. An integer overflow in the firmware for some Intel(R) Graphics Drivers may allow a privileged user to potentially enable an escalation of privilege via local access. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Important

A flaw was found in the Linux kernel. Improper input validation in some Intel(R) Graphics Drivers may allow a privileged user to potentially enable a denial of service via local access.

CWE-20 - Improper Input Validation
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

Null pointer reference in some Intel(R) Graphics Drivers for Microsoft Windows and the Linux kernel may allow a privileged user to potentially enable a denial of service via local access.

CWE-476 - NULL Pointer Dereference
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A use-after-free flaw was found in usb_sg_cancel in drivers/usb/core/message.c in the USB core subsystem. This flaw allows a local attacker with a special user or root privileges to crash the system due to a race problem in the scatter-gather cancellation and transfer completion in usb_sg_wait. This vulnerability can also lead to a leak of internal kernel information.

CWE-416 - Use After Free
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A memory out-of-bounds read flaw was found in the Linux kernel's ext3/ext4 file system, in the way it accesses a directory with broken indexing. This flaw allows a local user to crash the system if the directory exists. The highest threat from this vulnerability is to system availability.

CWE-125 - Out-of-bounds Read
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A use-after-free flaw was found in the Linux kernel’s cgroupv2 subsystem when rebooting the system. This flaw allows a local user to crash the system or escalate their privileges. The highest threat from this vulnerability is to system availability.

CWE-416 - Use After Free
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A NULL pointer dereference flaw was found in the Linux kernel’s UART 8250 functionality, in the way certain hardware architectures handled situations where default ports (0x2E8, 0x2F8, 0x3E8, 0x3F8) are not available. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system availability.

CWE-476 - NULL Pointer Dereference
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A vulnerability was found in NFSv4.2 in the Linux kernel, where a server fails to correctly apply umask when creating a new object on filesystem without ACL support (for example, ext4 with the "noacl" mount option). This flaw allows a local attacker with a user privilege to cause a kernel information leak problem.

CWE-732 - Incorrect Permission Assignment for Critical Resource
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A flaw was found in the NFSv4 implementation where when mounting a remote attacker controlled server it could return specially crafted response allow for local memory corruption and possibly privilege escalation.

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A flaw was found in the capabilities check of the rados block device functionality in the Linux kernel. Incorrect capability checks could alllow a local user with root priviledges (but no capabilities) to add or remove Rados Block Devices from the system.

CWE-732 - Incorrect Permission Assignment for Critical Resource
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A flaw was found in the Linux kernels sysctl handling code for hugepages management. When multiple root level processes would write to modify the /proc/sys/vm/nr_hugepages file it could create a race on internal variables leading to a system crash or memory corruption.

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A flaw was found in the HDLC_PPP module of the Linux kernel. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CWE-20 - Improper Input Validation
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A flaw was found in the Linux kernel. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.

CWE-319 - Cleartext Transmission of Sensitive Information
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A memory leak flaw was found in the Linux kernel’s performance monitoring subsystem when using PERF_EVENT_IOC_SET_FILTER. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability.

CWE-401 - Missing Release of Memory after Effective Lifetime
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. A write to this specific memory while freed and before use causes the flow of execution to change and possibly allow for memory corruption or privilege escalation. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CWE-416 - Use After Free
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A flaw use after free in the Linux kernel infiniband hfi1 driver was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system.

CWE-416 - Use After Free
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

An out-of-bounds (OOB) SLAB memory access flaw was found in the Linux kernel's fbcon driver module. A bounds check failure allows a local attacker with special user privileges to gain access to out-of-bounds memory, leading to a system crash or leaking of internal kernel information. The highest threat from this vulnerability is to system availability.

CWE-125 - Out-of-bounds Read
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.

CWE-665 - Improper Initialization
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A denial of service flaw was found in fuse_do_getattr in fs/fuse/dir.c in the kernel side of the FUSE filesystem in the Linux kernel. A local user could use this flaw to crash the system.

CWE-459 - Incomplete Cleanup
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A use-after-free flaw was found in the Linux kernel’s Virtual Terminal subsystem in how a user calls the VT_DISALLOCATE ioctl during the closing/opening of ttys. This flaw allows a local user to crash the system.

CWE-416 - Use After Free
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A use-after-free flaw was found in the packet processing context in net/netfilter/x_tables.c in netfilter in the Linux Kernel. This issue occurs when the per-CPU sequence count is mishandled during concurrent iptables rules replacement and can be exploited with the CAP_NET_ADMIN capability in an unprivileged namespace.

CWE-416 - Use After Free
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A flaw use after free in the Linux kernel TUN/TAP device driver functionality was found in the way user create and use tun/tap device. A local user could use this flaw to crash the system or possibly escalate their privileges on the system.

CWE-416 - Use After Free
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A flaw was found in the way the Linux kernel's pfkey_dump function trusted the provided filter size parameters. A local, sufficiently privileged user could use this flaw to leak information from the kernel.

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem in fs/ext4/extents.c in ext4_es_cache_extent. Fabricating an integer overflow, A local attacker with a special user privilege may cause a system crash problem which can lead to an availability threat.

CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Moderate

A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.

CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Fixed 120 products, the same list as for CVE-2019-18811
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2021:1578 self
https://access.redhat.com/security/updates/classi… external
https://access.redhat.com/documentation/en-us/red… external
https://bugzilla.redhat.com/show_bug.cgi?id=1777455 external
https://bugzilla.redhat.com/show_bug.cgi?id=1783434 external
https://bugzilla.redhat.com/show_bug.cgi?id=1783507 external
https://bugzilla.redhat.com/show_bug.cgi?id=1831726 external
https://bugzilla.redhat.com/show_bug.cgi?id=1833445 external
https://bugzilla.redhat.com/show_bug.cgi?id=1848084 external
https://bugzilla.redhat.com/show_bug.cgi?id=1848652 external
https://bugzilla.redhat.com/show_bug.cgi?id=1853922 external
https://bugzilla.redhat.com/show_bug.cgi?id=1859244 external
https://bugzilla.redhat.com/show_bug.cgi?id=1860479 external
https://bugzilla.redhat.com/show_bug.cgi?id=1868453 external
https://bugzilla.redhat.com/show_bug.cgi?id=1869141 external
https://bugzilla.redhat.com/show_bug.cgi?id=1873759 external
https://bugzilla.redhat.com/show_bug.cgi?id=1876840 external
https://bugzilla.redhat.com/show_bug.cgi?id=1877575 external
https://bugzilla.redhat.com/show_bug.cgi?id=1879981 external
https://bugzilla.redhat.com/show_bug.cgi?id=1882591 external
https://bugzilla.redhat.com/show_bug.cgi?id=1882594 external
https://bugzilla.redhat.com/show_bug.cgi?id=1890373 external
https://bugzilla.redhat.com/show_bug.cgi?id=1895961 external
https://bugzilla.redhat.com/show_bug.cgi?id=1900933 external
https://bugzilla.redhat.com/show_bug.cgi?id=1901161 external
https://bugzilla.redhat.com/show_bug.cgi?id=1901709 external
https://bugzilla.redhat.com/show_bug.cgi?id=1902724 external
https://bugzilla.redhat.com/show_bug.cgi?id=1903126 external
https://bugzilla.redhat.com/show_bug.cgi?id=1903387 external
https://bugzilla.redhat.com/show_bug.cgi?id=1903983 external
https://bugzilla.redhat.com/show_bug.cgi?id=1911343 external
https://bugzilla.redhat.com/show_bug.cgi?id=1915799 external
https://bugzilla.redhat.com/show_bug.cgi?id=1919889 external
https://bugzilla.redhat.com/show_bug.cgi?id=1930246 external
https://bugzilla.redhat.com/show_bug.cgi?id=1949560 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2019-18811 self
https://bugzilla.redhat.com/show_bug.cgi?id=1777455 external
https://www.cve.org/CVERecord?id=CVE-2019-18811 external
https://nvd.nist.gov/vuln/detail/CVE-2019-18811 external
https://access.redhat.com/security/cve/CVE-2019-19523 self
https://bugzilla.redhat.com/show_bug.cgi?id=1783434 external
https://www.cve.org/CVERecord?id=CVE-2019-19523 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19523 external
https://access.redhat.com/security/cve/CVE-2019-19528 self
https://bugzilla.redhat.com/show_bug.cgi?id=1783507 external
https://www.cve.org/CVERecord?id=CVE-2019-19528 external
https://nvd.nist.gov/vuln/detail/CVE-2019-19528 external
https://access.redhat.com/security/cve/CVE-2020-0431 self
https://bugzilla.redhat.com/show_bug.cgi?id=1919889 external
https://www.cve.org/CVERecord?id=CVE-2020-0431 external
https://nvd.nist.gov/vuln/detail/CVE-2020-0431 external
https://patchwork.kernel.org/project/linux-input/… external
https://access.redhat.com/security/cve/CVE-2020-11608 self
https://bugzilla.redhat.com/show_bug.cgi?id=1833445 external
https://www.cve.org/CVERecord?id=CVE-2020-11608 external
https://nvd.nist.gov/vuln/detail/CVE-2020-11608 external
https://access.redhat.com/security/cve/CVE-2020-12114 self
https://bugzilla.redhat.com/show_bug.cgi?id=1848652 external
https://www.cve.org/CVERecord?id=CVE-2020-12114 external
https://nvd.nist.gov/vuln/detail/CVE-2020-12114 external
https://access.redhat.com/security/cve/CVE-2020-12362 self
https://bugzilla.redhat.com/show_bug.cgi?id=1930246 external
https://www.cve.org/CVERecord?id=CVE-2020-12362 external
https://nvd.nist.gov/vuln/detail/CVE-2020-12362 external
https://access.redhat.com/security/cve/CVE-2020-12363 self
https://bugzilla.redhat.com/show_bug.cgi?id=1930249 external
https://www.cve.org/CVERecord?id=CVE-2020-12363 external
https://nvd.nist.gov/vuln/detail/CVE-2020-12363 external
https://www.intel.com/content/www/us/en/security-… external
https://access.redhat.com/security/cve/CVE-2020-12364 self
https://bugzilla.redhat.com/show_bug.cgi?id=1930251 external
https://www.cve.org/CVERecord?id=CVE-2020-12364 external
https://nvd.nist.gov/vuln/detail/CVE-2020-12364 external
https://access.redhat.com/security/cve/CVE-2020-12464 self
https://bugzilla.redhat.com/show_bug.cgi?id=1831726 external
https://www.cve.org/CVERecord?id=CVE-2020-12464 external
https://nvd.nist.gov/vuln/detail/CVE-2020-12464 external
https://access.redhat.com/security/cve/CVE-2020-14314 self
https://bugzilla.redhat.com/show_bug.cgi?id=1853922 external
https://www.cve.org/CVERecord?id=CVE-2020-14314 external
https://nvd.nist.gov/vuln/detail/CVE-2020-14314 external
https://git.kernel.org/pub/scm/linux/kernel/git/t… external
https://lore.kernel.org/linux-ext4/f53e246b-647c-… external
https://access.redhat.com/security/cve/CVE-2020-14356 self
https://bugzilla.redhat.com/show_bug.cgi?id=1868453 external
https://www.cve.org/CVERecord?id=CVE-2020-14356 external
https://nvd.nist.gov/vuln/detail/CVE-2020-14356 external
https://access.redhat.com/security/cve/CVE-2020-15437 self
https://bugzilla.redhat.com/show_bug.cgi?id=1901161 external
https://www.cve.org/CVERecord?id=CVE-2020-15437 external
https://nvd.nist.gov/vuln/detail/CVE-2020-15437 external
https://access.redhat.com/security/cve/CVE-2020-24394 self
https://bugzilla.redhat.com/show_bug.cgi?id=1869141 external
https://www.cve.org/CVERecord?id=CVE-2020-24394 external
https://nvd.nist.gov/vuln/detail/CVE-2020-24394 external
https://access.redhat.com/security/cve/CVE-2020-25212 self
https://bugzilla.redhat.com/show_bug.cgi?id=1877575 external
https://www.cve.org/CVERecord?id=CVE-2020-25212 external
https://nvd.nist.gov/vuln/detail/CVE-2020-25212 external
https://access.redhat.com/security/cve/CVE-2020-25284 self
https://bugzilla.redhat.com/show_bug.cgi?id=1882594 external
https://www.cve.org/CVERecord?id=CVE-2020-25284 external
https://nvd.nist.gov/vuln/detail/CVE-2020-25284 external
https://access.redhat.com/security/cve/CVE-2020-25285 self
https://bugzilla.redhat.com/show_bug.cgi?id=1882591 external
https://www.cve.org/CVERecord?id=CVE-2020-25285 external
https://nvd.nist.gov/vuln/detail/CVE-2020-25285 external
https://access.redhat.com/security/cve/CVE-2020-25643 self
https://bugzilla.redhat.com/show_bug.cgi?id=1879981 external
https://www.cve.org/CVERecord?id=CVE-2020-25643 external
https://nvd.nist.gov/vuln/detail/CVE-2020-25643 external
https://git.kernel.org/pub/scm/linux/kernel/git/t… external
https://access.redhat.com/security/cve/CVE-2020-25645 self
https://bugzilla.redhat.com/show_bug.cgi?id=1883988 external
https://www.cve.org/CVERecord?id=CVE-2020-25645 external
https://nvd.nist.gov/vuln/detail/CVE-2020-25645 external
https://access.redhat.com/security/cve/CVE-2020-25704 self
https://bugzilla.redhat.com/show_bug.cgi?id=1895961 external
https://www.cve.org/CVERecord?id=CVE-2020-25704 external
https://nvd.nist.gov/vuln/detail/CVE-2020-25704 external
https://git.kernel.org/pub/scm/linux/kernel/git/t… external
https://www.openwall.com/lists/oss-security/2020/… external
https://access.redhat.com/security/cve/CVE-2020-27786 self
https://bugzilla.redhat.com/show_bug.cgi?id=1900933 external
https://www.cve.org/CVERecord?id=CVE-2020-27786 external
https://nvd.nist.gov/vuln/detail/CVE-2020-27786 external
https://git.kernel.org/pub/scm/linux/kernel/git/t… external
https://access.redhat.com/security/cve/CVE-2020-27835 self
https://bugzilla.redhat.com/show_bug.cgi?id=1901709 external
https://www.cve.org/CVERecord?id=CVE-2020-27835 external
https://nvd.nist.gov/vuln/detail/CVE-2020-27835 external
https://access.redhat.com/security/cve/CVE-2020-28974 self
https://bugzilla.redhat.com/show_bug.cgi?id=1903126 external
https://www.cve.org/CVERecord?id=CVE-2020-28974 external
https://nvd.nist.gov/vuln/detail/CVE-2020-28974 external
https://access.redhat.com/security/cve/CVE-2020-35508 self
https://bugzilla.redhat.com/show_bug.cgi?id=1902724 external
https://www.cve.org/CVERecord?id=CVE-2020-35508 external
https://nvd.nist.gov/vuln/detail/CVE-2020-35508 external
https://access.redhat.com/security/cve/CVE-2020-36322 self
https://bugzilla.redhat.com/show_bug.cgi?id=1949560 external
https://www.cve.org/CVERecord?id=CVE-2020-36322 external
https://nvd.nist.gov/vuln/detail/CVE-2020-36322 external
https://git.kernel.org/pub/scm/linux/kernel/git/t… external
https://access.redhat.com/security/cve/CVE-2020-36557 self
https://bugzilla.redhat.com/show_bug.cgi?id=2112688 external
https://www.cve.org/CVERecord?id=CVE-2020-36557 external
https://nvd.nist.gov/vuln/detail/CVE-2020-36557 external
https://git.kernel.org/pub/scm/linux/kernel/git/t… external
https://access.redhat.com/security/cve/CVE-2020-36694 self
https://bugzilla.redhat.com/show_bug.cgi?id=2212140 external
https://www.cve.org/CVERecord?id=CVE-2020-36694 external
https://nvd.nist.gov/vuln/detail/CVE-2020-36694 external
https://git.kernel.org/pub/scm/linux/kernel/git/t… external
https://access.redhat.com/security/cve/CVE-2021-0342 self
https://bugzilla.redhat.com/show_bug.cgi?id=1915799 external
https://www.cve.org/CVERecord?id=CVE-2021-0342 external
https://nvd.nist.gov/vuln/detail/CVE-2021-0342 external
https://lore.kernel.org/netdev/20200608230607.336… external
https://access.redhat.com/security/cve/CVE-2021-0605 self
https://bugzilla.redhat.com/show_bug.cgi?id=1974823 external
https://www.cve.org/CVERecord?id=CVE-2021-0605 external
https://nvd.nist.gov/vuln/detail/CVE-2021-0605 external
https://access.redhat.com/security/cve/CVE-2021-3428 self
https://bugzilla.redhat.com/show_bug.cgi?id=1936786 external
https://www.cve.org/CVERecord?id=CVE-2021-3428 external
https://nvd.nist.gov/vuln/detail/CVE-2021-3428 external
https://access.redhat.com/security/cve/CVE-2023-1390 self
https://bugzilla.redhat.com/show_bug.cgi?id=2178212 external
https://www.cve.org/CVERecord?id=CVE-2023-1390 external
https://nvd.nist.gov/vuln/detail/CVE-2023-1390 external
https://gist.github.com/netspooky/bee2d07022f6350… external
https://infosec.exchange/@_mattata/109427999461122360 external

Loading 1.2 MB of JSON…



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Loading…