RHSA-2019:2945: Important: kpatch-patch security update
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.Security fix(es): If the Wake-up on Wireless LAN functionality is configured in the brcmfmac driver, which only works with Broadcom FullMAC chipsets, a malicious event frame can be constructed to trigger a heap buffer overflow in the brcmfwowlndresults() function. This vulnerability can be exploited by compromised chipsets to compromise the host, or when used in combination with another brcmfmac driver flaw (CVE-2019-9503), can be used remotely. This can result in a remote denial of service (DoS). Due to the nature of the flaw, a remote privilege escalation cannot be fully ruled out. (CVE-2019-9500) For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2019:2945?
The severity level of RHSA-2019:2945 is classified as important.
How do I fix RHSA-2019:2945?
To resolve RHSA-2019:2945, update the kpatch-patch package to version 3_10_0-1062-1-2.el7 or later.
Which systems are affected by RHSA-2019:2945?
RHSA-2019:2945 affects systems running the kpatch-patch package version 3_10_0-1062-1-2.el7.
What vulnerability does RHSA-2019:2945 address?
RHSA-2019:2945 addresses a vulnerability related to the Wake-up on Wireless LAN functionality in the brcmfmac driver.
Is there a workaround for RHSA-2019:2945?
There is no official workaround provided for RHSA-2019:2945, and the recommended action is to apply the security update.