MGASA-2019-0120
- Source
- https://advisories.mageia.org/MGASA-2019-0120.html
- Import Source
- https://advisories.mageia.org/MGASA-2019-0120.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2019-0120
- Related
- Published
- 2019-03-29T15:51:06Z
- Modified
- 2022-02-17T18:21:47Z
- Summary
- Updated kernel packages fix security vulnerability
- Details
-
This kernel update is based on the upstream 4.14.106 and fixes at least the following security issue:
In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task (CVE-2019-9213).
It also adds a preparatory fix for Skylake systems that will receive a microcode update at a later date to address a TSX errata.
WireGuard has been updated to 0.0.20190227.
For other uptstream fixes in this update, see the referenced changelogs.
- References
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:6 / kernel
Package
- Name
- kernel
- Purl
- pkg:rpm/mageia/kernel?distro=mageia-6
Mageia:6 / kernel-userspace-headers
Package
- Name
- kernel-userspace-headers
- Purl
- pkg:rpm/mageia/kernel-userspace-headers?distro=mageia-6
Mageia:6 / kmod-vboxadditions
Package
- Name
- kmod-vboxadditions
- Purl
- pkg:rpm/mageia/kmod-vboxadditions?distro=mageia-6
Mageia:6 / kmod-virtualbox
Package
- Name
- kmod-virtualbox
- Purl
- pkg:rpm/mageia/kmod-virtualbox?distro=mageia-6
Mageia:6 / kmod-xtables-addons
Package
- Name
- kmod-xtables-addons
- Purl
- pkg:rpm/mageia/kmod-xtables-addons?distro=mageia-6
Mageia:6 / wireguard-tools
Package
- Name
- wireguard-tools
- Purl
- pkg:rpm/mageia/wireguard-tools?distro=mageia-6