RHSA-2019:3517: Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: nfs: use-after-free in svcprocesscommon() (CVE-2018-16884) Kernel: vhostnet: infinite loop while receiving packets leads to DoS (CVE-2019-3900) Kernel: page cache side channel attacks (CVE-2019-5489) hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB) (CVE-2019-9506) kernel: Heap overflow in mwifiexuapparsetailies function in drivers/net/wireless/marvell/mwifiex/ie.c (CVE-2019-10126) Kernel: KVM: OOB memory access via mmio ring buffer (CVE-2019-14821) kernel: Information Disclosure in cryptoreportone in crypto/cryptouser.c (CVE-2018-19854) kernel: usb: missing size check in the usbgetextradescriptor() leading to DoS (CVE-2018-20169) kernel: Heap address information leak while using L2CAPGETCONFOPT (CVE-2019-3459) kernel: Heap address information leak while using L2CAPPARSECONFRSP (CVE-2019-3460) kernel: SCTP socket buffer memory leak leading to denial of service (CVE-2019-3874) kernel: denial of service vector through vfio DMA mappings (CVE-2019-3882) kernel: null-pointer dereference in hciuartsetflowcontrol (CVE-2019-10207) kernel: fix race condition between mmgetnotzero()/gettaskmm() and core dumping (CVE-2019-11599) kernel: fs/ext4/extents.c leads to information disclosure (CVE-2019-11833) kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command (CVE-2019-11884) kernel: use-after-free in arch/x86/lib/insn-eval.c (CVE-2019-13233) kernel: memory leak in registerqueuekobjects() in net/core/net-sysfs.c leads to denial of service (CVE-2019-15916) kernel: Linux stack ASLR implementation Integer overflow (CVE-2015-1593) kernel: oob memory read in hsoprobe in drivers/net/usb/hso.c (CVE-2018-19985) Kernel: KVM: leak of uninitialized stack contents to guest (CVE-2019-7222) Kernel: net: weak IP ID generation leads to remote device tracking (CVE-2019-10638) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.