- Issued:
- 2020-06-09
- Updated:
- 2020-06-09
RHSA-2020:2428 - Security Advisory
Synopsis
Important: kernel-rt security and bug fix update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
- kernel: use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body (CVE-2020-12657)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- kernel: hw: provide reporting and microcode mitigation toggle for CVE-2020-0543 / Special Register Buffer Data Sampling (SRBDS) (BZ#1827193)
- kernel-rt: update RT source tree to the RHEL-8.2.z1 source tree (BZ#1816271)
Solution
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.
Affected Products
- Red Hat Enterprise Linux for Real Time 8 x86_64
- Red Hat Enterprise Linux for Real Time for NFV 8 x86_64
- Red Hat Enterprise Linux for Real Time - Telecommunications Update Service 8.4 x86_64
- Red Hat Enterprise Linux for Real Time - Telecommunications Update Service 8.2 x86_64
- Red Hat Enterprise Linux for Real Time for NFV - Telecommunications Update Service 8.4 x86_64
- Red Hat Enterprise Linux for Real Time for NFV - Telecommunications Update Service 8.2 x86_64
Fixes
- BZ - 1832866 - CVE-2020-12657 kernel: use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body
CVEs
Note:
More recent versions of these packages may be available.
Click a package name for more details.
Red Hat Enterprise Linux for Real Time 8
| SRPM | |
|---|---|
| kernel-rt-4.18.0-193.6.3.rt13.59.el8_2.src.rpm | SHA-256: f289f5375aa91caa1e4c031c0c043dc45ec22118e8b73ad7b3398c11b59df1b1 |
| x86_64 | |
| kernel-rt-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 3ae071055a7661f60aa7bab3624c19ec31751e46f0e2f0037d68e497a50f9ab1 |
| kernel-rt-core-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 161e1cd1c8a856f097ecc79d72702896382e535f3ec2bd39983f76732ea11c8c |
| kernel-rt-debug-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: fe2caf7df40adf32df3d73bd78d5cf7e4988467dd5b948eb5126ba018eedae47 |
| kernel-rt-debug-core-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 2ac80c208f1658eacec4a58c902945e3e0cf4b527ea97fef710f72e338d856e4 |
| kernel-rt-debug-debuginfo-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 287a4a77730328d8b0e49362d56050919c6b0e81a7fb017d82f3f965da0e404a |
| kernel-rt-debug-devel-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 86904851653d92693558d8567613f77ad9d9608078d0f2b001b2f09acf988da5 |
| kernel-rt-debug-modules-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 0b31df82fb35e9d8421848795baf353a64b63b32f2834c1a5456c3e51a4d58bc |
| kernel-rt-debug-modules-extra-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 80c96c91a19da02ca32a8e86eef3b41ae645caa507e66c331d5b1e7bde42fa6b |
| kernel-rt-debuginfo-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 90aad7e8fe8791c6bee12cef6735e767f17abf73e394ec9ef5a47ea9d9279a03 |
| kernel-rt-debuginfo-common-x86_64-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 26cdf8851a688fddb321b071e22ed045ed3d6b2261d418141c0143f391e8f38f |
| kernel-rt-devel-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: b4e01b5f1b8f3d90755d60093646036fb743121e901a811bb57a9d7255e701f0 |
| kernel-rt-modules-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 1c1efe217dbdebe6fbbff0b52ee6c3fb5d5ab70fd0db76f90cab639a78a9163c |
| kernel-rt-modules-extra-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 8030647a8941a311ca3466e76028eb2481f6bd1d389bae7f3d2bad024565eee3 |
Red Hat Enterprise Linux for Real Time for NFV 8
| SRPM | |
|---|---|
| kernel-rt-4.18.0-193.6.3.rt13.59.el8_2.src.rpm | SHA-256: f289f5375aa91caa1e4c031c0c043dc45ec22118e8b73ad7b3398c11b59df1b1 |
| x86_64 | |
| kernel-rt-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 3ae071055a7661f60aa7bab3624c19ec31751e46f0e2f0037d68e497a50f9ab1 |
| kernel-rt-core-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 161e1cd1c8a856f097ecc79d72702896382e535f3ec2bd39983f76732ea11c8c |
| kernel-rt-debug-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: fe2caf7df40adf32df3d73bd78d5cf7e4988467dd5b948eb5126ba018eedae47 |
| kernel-rt-debug-core-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 2ac80c208f1658eacec4a58c902945e3e0cf4b527ea97fef710f72e338d856e4 |
| kernel-rt-debug-debuginfo-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 287a4a77730328d8b0e49362d56050919c6b0e81a7fb017d82f3f965da0e404a |
| kernel-rt-debug-devel-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 86904851653d92693558d8567613f77ad9d9608078d0f2b001b2f09acf988da5 |
| kernel-rt-debug-kvm-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 8466703936649e913bc95a83b93a6302764b450c95ba723e030e72e59e65f78f |
| kernel-rt-debug-modules-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 0b31df82fb35e9d8421848795baf353a64b63b32f2834c1a5456c3e51a4d58bc |
| kernel-rt-debug-modules-extra-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 80c96c91a19da02ca32a8e86eef3b41ae645caa507e66c331d5b1e7bde42fa6b |
| kernel-rt-debuginfo-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 90aad7e8fe8791c6bee12cef6735e767f17abf73e394ec9ef5a47ea9d9279a03 |
| kernel-rt-debuginfo-common-x86_64-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 26cdf8851a688fddb321b071e22ed045ed3d6b2261d418141c0143f391e8f38f |
| kernel-rt-devel-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: b4e01b5f1b8f3d90755d60093646036fb743121e901a811bb57a9d7255e701f0 |
| kernel-rt-kvm-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: dee1f50a5b8963f091ad226e1d3864b32f35eb39bd7c936f0e28d52fe91639bb |
| kernel-rt-modules-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 1c1efe217dbdebe6fbbff0b52ee6c3fb5d5ab70fd0db76f90cab639a78a9163c |
| kernel-rt-modules-extra-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 8030647a8941a311ca3466e76028eb2481f6bd1d389bae7f3d2bad024565eee3 |
Red Hat Enterprise Linux for Real Time - Telecommunications Update Service 8.4
| SRPM | |
|---|---|
| kernel-rt-4.18.0-193.6.3.rt13.59.el8_2.src.rpm | SHA-256: f289f5375aa91caa1e4c031c0c043dc45ec22118e8b73ad7b3398c11b59df1b1 |
| x86_64 | |
| kernel-rt-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 3ae071055a7661f60aa7bab3624c19ec31751e46f0e2f0037d68e497a50f9ab1 |
| kernel-rt-core-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 161e1cd1c8a856f097ecc79d72702896382e535f3ec2bd39983f76732ea11c8c |
| kernel-rt-debug-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: fe2caf7df40adf32df3d73bd78d5cf7e4988467dd5b948eb5126ba018eedae47 |
| kernel-rt-debug-core-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 2ac80c208f1658eacec4a58c902945e3e0cf4b527ea97fef710f72e338d856e4 |
| kernel-rt-debug-debuginfo-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 287a4a77730328d8b0e49362d56050919c6b0e81a7fb017d82f3f965da0e404a |
| kernel-rt-debug-devel-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 86904851653d92693558d8567613f77ad9d9608078d0f2b001b2f09acf988da5 |
| kernel-rt-debug-modules-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 0b31df82fb35e9d8421848795baf353a64b63b32f2834c1a5456c3e51a4d58bc |
| kernel-rt-debug-modules-extra-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 80c96c91a19da02ca32a8e86eef3b41ae645caa507e66c331d5b1e7bde42fa6b |
| kernel-rt-debuginfo-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 90aad7e8fe8791c6bee12cef6735e767f17abf73e394ec9ef5a47ea9d9279a03 |
| kernel-rt-debuginfo-common-x86_64-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 26cdf8851a688fddb321b071e22ed045ed3d6b2261d418141c0143f391e8f38f |
| kernel-rt-devel-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: b4e01b5f1b8f3d90755d60093646036fb743121e901a811bb57a9d7255e701f0 |
| kernel-rt-modules-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 1c1efe217dbdebe6fbbff0b52ee6c3fb5d5ab70fd0db76f90cab639a78a9163c |
| kernel-rt-modules-extra-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 8030647a8941a311ca3466e76028eb2481f6bd1d389bae7f3d2bad024565eee3 |
Red Hat Enterprise Linux for Real Time - Telecommunications Update Service 8.2
| SRPM | |
|---|---|
| kernel-rt-4.18.0-193.6.3.rt13.59.el8_2.src.rpm | SHA-256: f289f5375aa91caa1e4c031c0c043dc45ec22118e8b73ad7b3398c11b59df1b1 |
| x86_64 | |
| kernel-rt-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 3ae071055a7661f60aa7bab3624c19ec31751e46f0e2f0037d68e497a50f9ab1 |
| kernel-rt-core-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 161e1cd1c8a856f097ecc79d72702896382e535f3ec2bd39983f76732ea11c8c |
| kernel-rt-debug-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: fe2caf7df40adf32df3d73bd78d5cf7e4988467dd5b948eb5126ba018eedae47 |
| kernel-rt-debug-core-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 2ac80c208f1658eacec4a58c902945e3e0cf4b527ea97fef710f72e338d856e4 |
| kernel-rt-debug-debuginfo-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 287a4a77730328d8b0e49362d56050919c6b0e81a7fb017d82f3f965da0e404a |
| kernel-rt-debug-devel-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 86904851653d92693558d8567613f77ad9d9608078d0f2b001b2f09acf988da5 |
| kernel-rt-debug-modules-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 0b31df82fb35e9d8421848795baf353a64b63b32f2834c1a5456c3e51a4d58bc |
| kernel-rt-debug-modules-extra-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 80c96c91a19da02ca32a8e86eef3b41ae645caa507e66c331d5b1e7bde42fa6b |
| kernel-rt-debuginfo-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 90aad7e8fe8791c6bee12cef6735e767f17abf73e394ec9ef5a47ea9d9279a03 |
| kernel-rt-debuginfo-common-x86_64-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 26cdf8851a688fddb321b071e22ed045ed3d6b2261d418141c0143f391e8f38f |
| kernel-rt-devel-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: b4e01b5f1b8f3d90755d60093646036fb743121e901a811bb57a9d7255e701f0 |
| kernel-rt-modules-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 1c1efe217dbdebe6fbbff0b52ee6c3fb5d5ab70fd0db76f90cab639a78a9163c |
| kernel-rt-modules-extra-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 8030647a8941a311ca3466e76028eb2481f6bd1d389bae7f3d2bad024565eee3 |
Red Hat Enterprise Linux for Real Time for NFV - Telecommunications Update Service 8.4
| SRPM | |
|---|---|
| kernel-rt-4.18.0-193.6.3.rt13.59.el8_2.src.rpm | SHA-256: f289f5375aa91caa1e4c031c0c043dc45ec22118e8b73ad7b3398c11b59df1b1 |
| x86_64 | |
| kernel-rt-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 3ae071055a7661f60aa7bab3624c19ec31751e46f0e2f0037d68e497a50f9ab1 |
| kernel-rt-core-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 161e1cd1c8a856f097ecc79d72702896382e535f3ec2bd39983f76732ea11c8c |
| kernel-rt-debug-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: fe2caf7df40adf32df3d73bd78d5cf7e4988467dd5b948eb5126ba018eedae47 |
| kernel-rt-debug-core-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 2ac80c208f1658eacec4a58c902945e3e0cf4b527ea97fef710f72e338d856e4 |
| kernel-rt-debug-debuginfo-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 287a4a77730328d8b0e49362d56050919c6b0e81a7fb017d82f3f965da0e404a |
| kernel-rt-debug-devel-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 86904851653d92693558d8567613f77ad9d9608078d0f2b001b2f09acf988da5 |
| kernel-rt-debug-kvm-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 8466703936649e913bc95a83b93a6302764b450c95ba723e030e72e59e65f78f |
| kernel-rt-debug-modules-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 0b31df82fb35e9d8421848795baf353a64b63b32f2834c1a5456c3e51a4d58bc |
| kernel-rt-debug-modules-extra-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 80c96c91a19da02ca32a8e86eef3b41ae645caa507e66c331d5b1e7bde42fa6b |
| kernel-rt-debuginfo-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 90aad7e8fe8791c6bee12cef6735e767f17abf73e394ec9ef5a47ea9d9279a03 |
| kernel-rt-debuginfo-common-x86_64-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 26cdf8851a688fddb321b071e22ed045ed3d6b2261d418141c0143f391e8f38f |
| kernel-rt-devel-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: b4e01b5f1b8f3d90755d60093646036fb743121e901a811bb57a9d7255e701f0 |
| kernel-rt-kvm-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: dee1f50a5b8963f091ad226e1d3864b32f35eb39bd7c936f0e28d52fe91639bb |
| kernel-rt-modules-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 1c1efe217dbdebe6fbbff0b52ee6c3fb5d5ab70fd0db76f90cab639a78a9163c |
| kernel-rt-modules-extra-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 8030647a8941a311ca3466e76028eb2481f6bd1d389bae7f3d2bad024565eee3 |
Red Hat Enterprise Linux for Real Time for NFV - Telecommunications Update Service 8.2
| SRPM | |
|---|---|
| kernel-rt-4.18.0-193.6.3.rt13.59.el8_2.src.rpm | SHA-256: f289f5375aa91caa1e4c031c0c043dc45ec22118e8b73ad7b3398c11b59df1b1 |
| x86_64 | |
| kernel-rt-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 3ae071055a7661f60aa7bab3624c19ec31751e46f0e2f0037d68e497a50f9ab1 |
| kernel-rt-core-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 161e1cd1c8a856f097ecc79d72702896382e535f3ec2bd39983f76732ea11c8c |
| kernel-rt-debug-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: fe2caf7df40adf32df3d73bd78d5cf7e4988467dd5b948eb5126ba018eedae47 |
| kernel-rt-debug-core-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 2ac80c208f1658eacec4a58c902945e3e0cf4b527ea97fef710f72e338d856e4 |
| kernel-rt-debug-debuginfo-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 287a4a77730328d8b0e49362d56050919c6b0e81a7fb017d82f3f965da0e404a |
| kernel-rt-debug-devel-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 86904851653d92693558d8567613f77ad9d9608078d0f2b001b2f09acf988da5 |
| kernel-rt-debug-kvm-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 8466703936649e913bc95a83b93a6302764b450c95ba723e030e72e59e65f78f |
| kernel-rt-debug-modules-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 0b31df82fb35e9d8421848795baf353a64b63b32f2834c1a5456c3e51a4d58bc |
| kernel-rt-debug-modules-extra-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 80c96c91a19da02ca32a8e86eef3b41ae645caa507e66c331d5b1e7bde42fa6b |
| kernel-rt-debuginfo-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 90aad7e8fe8791c6bee12cef6735e767f17abf73e394ec9ef5a47ea9d9279a03 |
| kernel-rt-debuginfo-common-x86_64-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 26cdf8851a688fddb321b071e22ed045ed3d6b2261d418141c0143f391e8f38f |
| kernel-rt-devel-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: b4e01b5f1b8f3d90755d60093646036fb743121e901a811bb57a9d7255e701f0 |
| kernel-rt-kvm-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: dee1f50a5b8963f091ad226e1d3864b32f35eb39bd7c936f0e28d52fe91639bb |
| kernel-rt-modules-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 1c1efe217dbdebe6fbbff0b52ee6c3fb5d5ab70fd0db76f90cab639a78a9163c |
| kernel-rt-modules-extra-4.18.0-193.6.3.rt13.59.el8_2.x86_64.rpm | SHA-256: 8030647a8941a311ca3466e76028eb2481f6bd1d389bae7f3d2bad024565eee3 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.