Synopsis:          Important: kernel security update

Advisory ID:       SLSA-2019:2829-1

Issue Date:        2019-09-20

CVE Numbers:       None

--



Security Fix(es):

    

    * A buffer overflow flaw was found in the way Linux kernel's vhost

    functionality that translates virtqueue buffers to IOVs, logged the buffer

    descriptors during migration. A privileged guest user able to pass

    descriptors with invalid length to the host when migration is underway,

    could use this flaw to increase their privileges on the host.

    (CVE-2019-14835)

--



SL7

  x86_64

    bpftool-3.10.0-1062.1.2.el7.x86_64.rpm

    bpftool-debuginfo-3.10.0-1062.1.2.el7.x86_64.rpm

    kernel-3.10.0-1062.1.2.el7.x86_64.rpm

    kernel-debug-3.10.0-1062.1.2.el7.x86_64.rpm

    kernel-debug-debuginfo-3.10.0-1062.1.2.el7.x86_64.rpm

    kernel-debug-devel-3.10.0-1062.1.2.el7.x86_64.rpm

    kernel-debuginfo-3.10.0-1062.1.2.el7.x86_64.rpm

    kernel-debuginfo-common-x86_64-3.10.0-1062.1.2.el7.x86_64.rpm

    kernel-devel-3.10.0-1062.1.2.el7.x86_64.rpm

    kernel-headers-3.10.0-1062.1.2.el7.x86_64.rpm

    kernel-tools-3.10.0-1062.1.2.el7.x86_64.rpm

    kernel-tools-debuginfo-3.10.0-1062.1.2.el7.x86_64.rpm

    kernel-tools-libs-3.10.0-1062.1.2.el7.x86_64.rpm

    perf-3.10.0-1062.1.2.el7.x86_64.rpm

    perf-debuginfo-3.10.0-1062.1.2.el7.x86_64.rpm

    python-perf-3.10.0-1062.1.2.el7.x86_64.rpm

    python-perf-debuginfo-3.10.0-1062.1.2.el7.x86_64.rpm

    kernel-tools-libs-devel-3.10.0-1062.1.2.el7.x86_64.rpm

  noarch

    kernel-abi-whitelists-3.10.0-1062.1.2.el7.noarch.rpm

    kernel-doc-3.10.0-1062.1.2.el7.noarch.rpm



- Scientific Linux Development Team