ID

VAR-201905-1057

CVE

CVE-2019-11085

TITLE

Intel Multiple vulnerabilities in the product

DESCRIPTION

Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Linux for Intel(R) i915 Graphics Contains an input validation vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Linux Kernel is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to to gain elevated privileges. Linux versions prior to 5.0 are vulnerable. (CVE-2018-13053). -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security, bug fix, and enhancement update Advisory ID: RHSA-2020:0592-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:0592 Issue date: 2020-02-25 CVE Names: CVE-2018-20976 CVE-2019-11085 CVE-2019-14895 CVE-2019-17133 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server AUS (v. 7.4) - noarch, x86_64 Red Hat Enterprise Linux Server E4S (v. 7.4) - noarch, ppc64le, x86_64 Red Hat Enterprise Linux Server Optional AUS (v. 7.4) - x86_64 Red Hat Enterprise Linux Server Optional E4S (v. 7.4) - ppc64le, x86_64 Red Hat Enterprise Linux Server Optional TUS (v. 7.4) - x86_64 Red Hat Enterprise Linux Server TUS (v. 7.4) - noarch, x86_64 3. Bug Fix(es): * core: backports from upstream (BZ#1794372) Enhancement(s): * Selective backport: perf: Sync with upstream v4.16 (BZ#1782750) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Package List: Red Hat Enterprise Linux Server AUS (v. 7.4): Source: kernel-3.10.0-693.64.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-693.64.1.el7.noarch.rpm kernel-doc-3.10.0-693.64.1.el7.noarch.rpm x86_64: kernel-3.10.0-693.64.1.el7.x86_64.rpm kernel-debug-3.10.0-693.64.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-693.64.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.64.1.el7.x86_64.rpm kernel-devel-3.10.0-693.64.1.el7.x86_64.rpm kernel-headers-3.10.0-693.64.1.el7.x86_64.rpm kernel-tools-3.10.0-693.64.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-693.64.1.el7.x86_64.rpm perf-3.10.0-693.64.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm python-perf-3.10.0-693.64.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm Red Hat Enterprise Linux Server E4S (v. 7.4): Source: kernel-3.10.0-693.64.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-693.64.1.el7.noarch.rpm kernel-doc-3.10.0-693.64.1.el7.noarch.rpm ppc64le: kernel-3.10.0-693.64.1.el7.ppc64le.rpm kernel-bootwrapper-3.10.0-693.64.1.el7.ppc64le.rpm kernel-debug-3.10.0-693.64.1.el7.ppc64le.rpm kernel-debug-debuginfo-3.10.0-693.64.1.el7.ppc64le.rpm kernel-debuginfo-3.10.0-693.64.1.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-693.64.1.el7.ppc64le.rpm kernel-devel-3.10.0-693.64.1.el7.ppc64le.rpm kernel-headers-3.10.0-693.64.1.el7.ppc64le.rpm kernel-tools-3.10.0-693.64.1.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-693.64.1.el7.ppc64le.rpm kernel-tools-libs-3.10.0-693.64.1.el7.ppc64le.rpm perf-3.10.0-693.64.1.el7.ppc64le.rpm perf-debuginfo-3.10.0-693.64.1.el7.ppc64le.rpm python-perf-3.10.0-693.64.1.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-693.64.1.el7.ppc64le.rpm x86_64: kernel-3.10.0-693.64.1.el7.x86_64.rpm kernel-debug-3.10.0-693.64.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-693.64.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.64.1.el7.x86_64.rpm kernel-devel-3.10.0-693.64.1.el7.x86_64.rpm kernel-headers-3.10.0-693.64.1.el7.x86_64.rpm kernel-tools-3.10.0-693.64.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-693.64.1.el7.x86_64.rpm perf-3.10.0-693.64.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm python-perf-3.10.0-693.64.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm Red Hat Enterprise Linux Server TUS (v. 7.4): Source: kernel-3.10.0-693.64.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-693.64.1.el7.noarch.rpm kernel-doc-3.10.0-693.64.1.el7.noarch.rpm x86_64: kernel-3.10.0-693.64.1.el7.x86_64.rpm kernel-debug-3.10.0-693.64.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-693.64.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.64.1.el7.x86_64.rpm kernel-devel-3.10.0-693.64.1.el7.x86_64.rpm kernel-headers-3.10.0-693.64.1.el7.x86_64.rpm kernel-tools-3.10.0-693.64.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-693.64.1.el7.x86_64.rpm perf-3.10.0-693.64.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm python-perf-3.10.0-693.64.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional AUS (v. 7.4): x86_64: kernel-debug-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.64.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-693.64.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional E4S (v. 7.4): ppc64le: kernel-debug-debuginfo-3.10.0-693.64.1.el7.ppc64le.rpm kernel-debug-devel-3.10.0-693.64.1.el7.ppc64le.rpm kernel-debuginfo-3.10.0-693.64.1.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-693.64.1.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-693.64.1.el7.ppc64le.rpm kernel-tools-libs-devel-3.10.0-693.64.1.el7.ppc64le.rpm perf-debuginfo-3.10.0-693.64.1.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-693.64.1.el7.ppc64le.rpm x86_64: kernel-debug-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.64.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-693.64.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional TUS (v. 7.4): x86_64: kernel-debug-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.64.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-693.64.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.64.1.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2018-20976 https://access.redhat.com/security/cve/CVE-2019-11085 https://access.redhat.com/security/cve/CVE-2019-14895 https://access.redhat.com/security/cve/CVE-2019-17133 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXlUO79zjgjWX9erEAQhRNA//YeD7r8z4MuCHd3FlyOgNrfB77wwCO71Y VOJC4KJqrFov39AnxhNL4GxX4JlJ6rqH9hWbShjiVIhlUDaLVV/TDAfv2PneZjEu AVlINbpKX29uh5PjzdN8Ae569UQsKHt1r/M/scTtOW3qDsJXYgbVHTmdmOnoCEJB f0QnQfmERZ10DMt26yBQd6XTgrOQTlXigAdVtbD37Ypv+ORrXxGlYx7MNZO+axCM Mp3p9xWeJ+ROGzObihIaKl9sSe4Y72B8xnSnyPbTn1Mq7Iu4fYQGEKpQE3s+SxOu RRPs3mdxTiBee3jPaFKaKmh/5ZPOlvEsxf2SlgetggTJbMetohaj7ChITyScjGsj wTVj0Yy5Xjc/F1C5BacjPAZh2+oSMd+lqE4yunbcv4RE58x+ZSX97lvEk/3rLRHB i9grudD8N7GWhYnudSHjGdasoancecF1pYvB1lAyPA5cPMOnW48j0waDwNdBiUrm 0F1RqIY5sp1ygW39IGIZ0LWee7Ujska0lVdlYN5k5qOLiOoBXgdZ7vuclo7zM2iB cq1r5h76hQw6s7xnrShP/ZKlM+b0ykL4a70Rpqlr+fsJbwUSe0eqjOzWElgMqu7p yR/cOF9+Lo6ulBa05eBbW0o/4jZRHPKRSzXKIjxor0IYuCkcRSLnVBPoKZuMaJxK 8vgiTrLgjNQ=RbSn -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . 7.5) - ppc64, ppc64le, x86_64 3. ========================================================================== Ubuntu Security Notice USN-4068-1 July 23, 2019 linux, linux-aws, linux-gcp, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS Summary: Several security issues were fixed in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-11085) It was discovered that a race condition leading to a use-after-free existed in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel. The RDS protocol is blacklisted by default in Ubuntu. If enabled, a local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-11815) It was discovered that the ext4 file system implementation in the Linux kernel did not properly zero out memory in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2019-11833) It was discovered that the Bluetooth Human Interface Device Protocol (HIDP) implementation in the Linux kernel did not properly verify strings were NULL terminated in certain situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2019-11884) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: linux-image-4.15.0-1018-oracle 4.15.0-1018.20 linux-image-4.15.0-1037-gcp 4.15.0-1037.39 linux-image-4.15.0-1039-kvm 4.15.0-1039.39 linux-image-4.15.0-1041-raspi2 4.15.0-1041.44 linux-image-4.15.0-1044-aws 4.15.0-1044.46 linux-image-4.15.0-1058-snapdragon 4.15.0-1058.64 linux-image-4.15.0-55-generic 4.15.0-55.60 linux-image-4.15.0-55-generic-lpae 4.15.0-55.60 linux-image-4.15.0-55-lowlatency 4.15.0-55.60 linux-image-aws 4.15.0.1044.43 linux-image-gcp 4.15.0.1037.39 linux-image-generic 4.15.0.55.57 linux-image-generic-lpae 4.15.0.55.57 linux-image-kvm 4.15.0.1039.39 linux-image-lowlatency 4.15.0.55.57 linux-image-oracle 4.15.0.1018.21 linux-image-powerpc-e500mc 4.15.0.55.57 linux-image-powerpc-smp 4.15.0.55.57 linux-image-powerpc64-emb 4.15.0.55.57 linux-image-powerpc64-smp 4.15.0.55.57 linux-image-raspi2 4.15.0.1041.39 linux-image-snapdragon 4.15.0.1058.61 linux-image-virtual 4.15.0.55.57 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Bug Fix(es): * [DELL 8.0 z-stream BUG] - "CPU unsupported" message with CFL-H/S 8+2 due to updated Stepping (BZ#1711048) * RHEL8.0 Snapshot4 - [LTC Test] Guest crashes during vfio device hot-plug/un-plug operations. (kvm) (BZ#1714746) * Using Transactional Memory (TM) in a Guest Locks-up Host Core on a Power9 System (BZ#1714751) * VRSAVE register not properly saved and restored (BZ#1714753) * Fix potential spectre gadget in arch/s390/kvm/interrupt.c (BZ#1714754) * RHEL8.0 RC2 - kernel/KVM - count cache flush Spectre v2 mitigation (required for POWER9 DD2.3) (BZ#1715018) * iommu/amd: Set exclusion range correctly (BZ#1715336) * RHEL8.0 - sched/fair: Do not re-read ->h_load_next during hierarchical load calculation (BZ#1715337) * cross compile builds are broken (BZ#1715339) * Patch generated by 'make rh-test-patch' doesn't get applied during build (BZ#1715340) * hard lockup panic in during execution of CFS bandwidth period timer (BZ#1715345) * perf annotate -P does not give full paths (BZ#1716887) * [Dell EMC 8.0 BUG] File system corrupting with I/O Stress on H330 PERC on AMD Systems if IOMMU passthrough is disabled (BZ#1717344) * Fix Spectre v1 gadgets in drivers/gpu/drm/drm_bufs.c and drivers/gpu/drm/drm_ioctl.c (BZ#1717382) * BUG: SELinux doesn't handle NFS crossmnt well (BZ#1717777) * krb5{,i,p} doesn't work with older enctypes on aarch64 (BZ#1717800) * [RHEL-8.0][s390x]ltp-lite mtest06 testing hits EWD due to: rcu: INFO: rcu_sched self-detected stall on CPU (BZ#1717801) * RHEL 8 Snapshot-6: CN1200E SW iSCSI I/O performance degradation after a SCSI device/target reset rhel-8.0.0.z] (BZ#1717804) * dm cache metadata: Fix loading discard bitset (BZ#1717868) * jit'd java code on power9 ppc64le experiences stack corruption (BZ#1717869) * BUG: connect(AF_UNSPEC, ...) on a connected socket returns an error (BZ#1717870) * mm: BUG: unable to handle kernel paging request at 0000000057ac6e9d (BZ#1718237) * [HPE 8.0 BUG] DCPMM fsdax boot initialization takes a long time causing auto-mount to fail (BZ#1719635) * AMD Rome: WARNING: CPU: 1 PID: 0 at arch/x86/kernel/cpu/mcheck/mce.c:1510 mcheck_cpu_init+0x7a/0x460 (BZ#1721233) * [RHEL8.1] AMD Rome: EDAC amd64: Error: F0 not found, device 0x1460 (broken BIOS?) (BZ#1722365) * AMD Rome: Intermittent NMI received for unknown reason (BZ#1722367) * [DELL 8.0 BUG] - "CPU unsupported" message with WHL-U due to updated Stepping (BZ#1722372) Enhancement(s): * RHEL 8 - AMD Rome Support (BZ#1721972) Users of kernel are advised to upgrade to these updated packages, which fix these bugs and add this enhancement. Description: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Bug Fix(es): * kernel-rt: update to the RHEL7.6.z batch#6 source tree (BZ#1718400) 4. 8) - x86_64 3

AFFECTED PRODUCTS