RHSA-2020:3019: Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario (CVE-2020-12888) kernel: denial of service in arch/powerpc/kernel/signal32.c and arch/powerpc/kernel/signal64.c via sigreturn() system call (CVE-2019-13648) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): kernel: hw: provide reporting and microcode mitigation toggle for CVE-2020-0543 / Special Register Buffer Data Sampling (SRBDS) (BZ#1840678) Deadlock condition grabbing ssbstate lock (BZ#1841120) ext4: change LRU to round-robin in extent status tree shrinker (BZ#1847342) Emulex lpfc seems to get hung up failing IOCB'S continuously on kernel 3.10.0-957.21.3.el7.x8664 leading to Oracle evictions (BZ#1849650) After upgrade to 3.9.89 pod containers with CPU limits fail to start due to cgroup error (BZ#1850499) Enhancement(s): [Marvell 7.8 FEAT] Update bnx2fc driver to latest upstream (BZ#1834817)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:3019?
The severity of RHSA-2020:3019 is classified as important, indicating a significant security concern that requires timely attention.
How do I fix RHSA-2020:3019?
You can fix RHSA-2020:3019 by updating to the kernel version 3.10.0-1062.30.1.el7 or later as recommended in the advisory.
What vulnerabilities are addressed in RHSA-2020:3019?
RHSA-2020:3019 addresses vulnerabilities including a denial of service scenario caused by vfio access to disabled MMIO space of some devices (CVE-2020-12888).
What packages are affected by RHSA-2020:3019?
Affected packages include kernel, kernel-debug, and bpftool among others, which need updates to the specified version.
Is RHSA-2020:3019 applicable to all Linux distributions?
No, RHSA-2020:3019 specifically applies to Red Hat Enterprise Linux, so other distributions may not be affected.