MGASA-2019-0332
- Source
- https://advisories.mageia.org/MGASA-2019-0332.html
- Import Source
- https://advisories.mageia.org/MGASA-2019-0332.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2019-0332
- Related
- Published
- 2019-11-19T21:16:53Z
- Modified
- 2022-02-17T18:21:47Z
- Summary
- Updated kernel packages fix security vulnerabilities
- Details
-
This kernel update is based on the upstream 5.3.11 and fixes at least the following security issues:
Insufficient access control in a subsystem for Intel (R) processor graphics may allow an authenticated user to potentially enable escalation of privilege via local access (CVE-2019-0155).
TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access (CVE-2019-11135).
Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access (CVE-2018-12207).
For proper mitigations and fixes for theese issues, a microcode update is also needed, either with a bios/uefi update from your hardware vendor or by installing the microcode-0.20191112-1.mga7.nonfree update (mga#25688).
For other upstream fixes in this update, see the referenced changelogs.
- References
-
- https://advisories.mageia.org/MGASA-2019-0332.html
- https://bugs.mageia.org/show_bug.cgi?id=25686
- https://bugs.mageia.org/show_bug.cgi?id=25688
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.8
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.10
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:7 / kernel
Package
- Name
- kernel
- Purl
- pkg:rpm/mageia/kernel?distro=mageia-7
Mageia:7 / kmod-virtualbox
Package
- Name
- kmod-virtualbox
- Purl
- pkg:rpm/mageia/kmod-virtualbox?distro=mageia-7
Mageia:7 / kmod-xtables-addons
Package
- Name
- kmod-xtables-addons
- Purl
- pkg:rpm/mageia/kmod-xtables-addons?distro=mageia-7