Synopsis: Important: kernel security update
Advisory ID: SLSA-2019:2829-1
Issue Date: 2019-09-20
CVE Numbers: CVE-2019-14835
—
Security Fix(es):
* A buffer overflow flaw was found in the way Linux kernel’s vhost
functionality that translates virtqueue buffers to IOVs, logged the buffer
descriptors during migration. A privileged guest user able to pass
descriptors with invalid length to the host when migration is underway,
could use this flaw to increase their privileges on the host.
(CVE-2019-14835)
—
SL7
x86_64
bpftool-3.10.0-1062.1.2.el7.x86_64.rpm
bpftool-debuginfo-3.10.0-1062.1.2.el7.x86_64.rpm
kernel-3.10.0-1062.1.2.el7.x86_64.rpm
kernel-debug-3.10.0-1062.1.2.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-1062.1.2.el7.x86_64.rpm
kernel-debug-devel-3.10.0-1062.1.2.el7.x86_64.rpm
kernel-debuginfo-3.10.0-1062.1.2.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-1062.1.2.el7.x86_64.rpm
kernel-devel-3.10.0-1062.1.2.el7.x86_64.rpm
kernel-headers-3.10.0-1062.1.2.el7.x86_64.rpm
kernel-tools-3.10.0-1062.1.2.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-1062.1.2.el7.x86_64.rpm
kernel-tools-libs-3.10.0-1062.1.2.el7.x86_64.rpm
perf-3.10.0-1062.1.2.el7.x86_64.rpm
perf-debuginfo-3.10.0-1062.1.2.el7.x86_64.rpm
python-perf-3.10.0-1062.1.2.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-1062.1.2.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-1062.1.2.el7.x86_64.rpm
noarch
kernel-abi-whitelists-3.10.0-1062.1.2.el7.noarch.rpm
kernel-doc-3.10.0-1062.1.2.el7.noarch.rpm
– Scientific Linux Development Team
