The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3224 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in     drivers/net/wireless/marvell/mwifiex/scan.c (CVE-2020-12653)

    * kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in     drivers/net/wireless/marvell/mwifiex/wmm.c (CVE-2020-12654)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel: provide infrastructure to support dual-signing of the kernel (foundation to help address     CVE-2020-10713) (BZ#1837428)

    * RHEL7.7 - Request: retrofit kernel commit f82b4b6 to RHEL 7.7/7.8 3.10 kernels. (BZ#1838601)

    * Possible race condition updating the cfg structure in __assign_irq_vector. (BZ#1854553)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3226 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: kernel: DAX hugepages not considered during mremap (CVE-2020-10757)

    * kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in     drivers/net/wireless/marvell/mwifiex/scan.c (CVE-2020-12653)

    * kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in     drivers/net/wireless/marvell/mwifiex/wmm.c (CVE-2020-12654)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel: provide infrastructure to support dual-signing of the kernel (foundation to help address     CVE-2020-10713) (BZ#1837427)

    * Fix dpdk regression introduced by bz1837297 (BZ#1852775)

    * Possible race condition updating the cfg structure in __assign_irq_vector. (BZ#1854552)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3221 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: kernel: DAX hugepages not considered during mremap (CVE-2020-10757)

    * kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in     drivers/net/wireless/marvell/mwifiex/scan.c (CVE-2020-12653)

    * kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in     drivers/net/wireless/marvell/mwifiex/wmm.c (CVE-2020-12654)

    * kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver     (CVE-2019-19527)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel-rt: provide infrastructure to support dual-signing of the kernel (foundation to help address     CVE-2020-10713) (BZ#1837438)

    * kernel-rt: update to the latest RHEL7.8.z3 source tree (BZ#1848017)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3220 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: kernel: DAX hugepages not considered during mremap (CVE-2020-10757)

    * kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in     drivers/net/wireless/marvell/mwifiex/scan.c (CVE-2020-12653)

    * kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in     drivers/net/wireless/marvell/mwifiex/wmm.c (CVE-2020-12654)

    * kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver     (CVE-2019-19527)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * RHEL7.7 - scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (BZ#1830889)

    * [DELL EMC 7.8 BUG bnxt_en] Error messages related to hwrm observed for BCM 57504 under dmesg in RHEL 7.8     (BZ#1834190)

    * kernel: provide infrastructure to support dual-signing of the kernel (foundation to help address     CVE-2020-10713) (BZ#1837429)

    * RHEL7.7 - Request: retrofit kernel commit f82b4b6 to RHEL 7.7/7.8 3.10 kernels. (BZ#1838602)

    * kipmi thread high CPU consumption when performing BMC firmware upgrade (BZ#1841825)

    * RHEL7.7 - virtio-blk: fix hw_queue stopped on arbitrary error (kvm) (BZ#1842994)

    * rhel 7 infinite blocked waiting on inode_dio_wait in nfs (BZ#1845520)

    * http request is taking more time for endpoint running on different host via nodeport service     (BZ#1847333)

    * ext4: change LRU to round-robin in extent status tree shrinker (BZ#1847343)

    * libaio is returning duplicate events (BZ#1850055)

    * After upgrade to 3.9.89 pod containers with CPU limits fail to start due to cgroup error (BZ#1850500)

    * Fix dpdk regression introduced by bz1837297 (BZ#1852245)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3222 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: use-after-free in sound/core/timer.c (CVE-2019-19807)

    * kernel: kernel: DAX hugepages not considered during mremap (CVE-2020-10757)

    * kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off     the SSBD protection. (CVE-2020-10766)

    * kernel: Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS     is available. (CVE-2020-10767)

    * kernel: Indirect branch speculation can be enabled after it was force-disabled by the     PR_SPEC_FORCE_DISABLE prctl command. (CVE-2020-10768)

    * kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in     drivers/net/wireless/marvell/mwifiex/scan.c (CVE-2020-12653)

    * kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in     drivers/net/wireless/marvell/mwifiex/wmm.c (CVE-2020-12654)

    * Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario (CVE-2020-12888)

    * kernel: lockdown: bypass through ACPI write via efivar_ssdt (CVE-2019-20908)

    * kernel: lockdown: bypass through ACPI write via acpi_configfs (CVE-2020-15780)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * [DELL EMC 8.1 BUG] : Observing Multiple hw csum failure while installing RHEL 8.1 on iSCSI LUN     (BZ#1821374)

    * kernel: provide infrastructure to support dual-signing of the kernel (foundation to help address     CVE-2020-10713) (BZ#1837432)

    * deadlock between modprobe and netns exit (BZ#1845163)

    * exit_boot failed when install RHEL8.1 (BZ#1846179)

    * http request is taking more time for endpoint running on different host via nodeport service     (BZ#1847127)

    * RHEL8.1 - s390/cio: fix virtio-ccw DMA without PV (BZ#1847534)

    * RHEL8.1 - zEDC problems on z14 (genwqe/pci) (BZ#1847939)

    * NVMe/FC with DM-MP unexpected I/O failure during transitioning [EIOP-8345] (BZ#1854678)

    * Backport conntrack race condition fixes (BZ#1854953)

    * nf_conntrack module unload fail and refcount become to negative (BZ#1854954)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
139195	RHEL 7 : kernel (RHSA-2020:3224)	Nessus	Red Hat Local Security Checks	7/30/2020	11/8/2024	high
139197	RHEL 7 : kernel (RHSA-2020:3226)	Nessus	Red Hat Local Security Checks	7/30/2020	11/7/2024	high
139200	RHEL 7 : kernel-rt (RHSA-2020:3221)	Nessus	Red Hat Local Security Checks	7/31/2020	11/7/2024	high
139199	RHEL 7 : kernel (RHSA-2020:3220)	Nessus	Red Hat Local Security Checks	7/30/2020	11/7/2024	high
139187	RHEL 8 : kernel (RHSA-2020:3222)	Nessus	Red Hat Local Security Checks	7/30/2020	11/7/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high