7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.018 Low
EPSS
Percentile
88.3%
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
kernel: Use-after-free in snd_pcm_info function in ALSA subsystem potentially leads to privilege escalation (CVE-2017-0861)
kernel: Handling of might_cancel queueing is not properly pretected against race (CVE-2017-10661)
kernel: kvm: guest userspace to guest kernel write (CVE-2018-10853)
kernel: TLB flush happens too late on mremap (CVE-2018-18281)
kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS (CVE-2019-11810)
kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c (CVE-2019-11811)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 7 | ppc64le | perf-debuginfo | < 3.10.0-862.46.1.el7 | perf-debuginfo-3.10.0-862.46.1.el7.ppc64le.rpm |
RedHat | 7 | ppc64 | perf-debuginfo | < 3.10.0-862.46.1.el7 | perf-debuginfo-3.10.0-862.46.1.el7.ppc64.rpm |
RedHat | 7 | ppc64 | kernel-devel | < 3.10.0-862.46.1.el7 | kernel-devel-3.10.0-862.46.1.el7.ppc64.rpm |
RedHat | 7 | s390x | kernel | < 3.10.0-862.46.1.el7 | kernel-3.10.0-862.46.1.el7.s390x.rpm |
RedHat | 7 | s390x | kernel-kdump-debuginfo | < 3.10.0-862.46.1.el7 | kernel-kdump-debuginfo-3.10.0-862.46.1.el7.s390x.rpm |
RedHat | 7 | noarch | kernel-doc | < 3.10.0-862.46.1.el7 | kernel-doc-3.10.0-862.46.1.el7.noarch.rpm |
RedHat | 7 | s390x | perf | < 3.10.0-862.46.1.el7 | perf-3.10.0-862.46.1.el7.s390x.rpm |
RedHat | 7 | s390x | kernel-kdump-devel | < 3.10.0-862.46.1.el7 | kernel-kdump-devel-3.10.0-862.46.1.el7.s390x.rpm |
RedHat | 7 | x86_64 | kernel-debuginfo | < 3.10.0-862.46.1.el7 | kernel-debuginfo-3.10.0-862.46.1.el7.x86_64.rpm |
RedHat | 7 | ppc64 | kernel-debug | < 3.10.0-862.46.1.el7 | kernel-debug-3.10.0-862.46.1.el7.ppc64.rpm |
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.018 Low
EPSS
Percentile
88.3%