CVE-2019-9500

kernel-rt-debug-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...

CVE-2019-9500 is fixed in 37 products on 1 platform, first by RHSA-2019:2703, released September 12, 2019. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.3
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0385
90th percentile

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c (CVE-2019-3846) * Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS (CVE-2019-3887) * kernel: brcmfmac heap buffer overflow in brcmf_wowl_nd_results (CVE-2019-9500) * kernel: Count overflow in FUSE request leading to use-after-free issues. (CVE-2019-11487) * kernel: brcmfmac frame validation bypass (CVE-2019-9503) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * BUG: scheduling while atomic in zswap (BZ#1726362) * kernel-rt: update to the RHEL8.0.z batch#3 source tree (BZ#1734475)

Where it's fixed

ProductFixed inFixReleased
Linux
bpftool · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
bpftool · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-abi-whitelists · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-abi-whitelists · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-core · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-core · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-cross-headers · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-cross-headers · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-debug · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-debug · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-debug-core · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-debug-core · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-debug-devel · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-debug-devel · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-debug-modules · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-debug-modules · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-debug-modules-extra · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-debug-modules-extra · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-devel · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-devel · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-doc · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-doc · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-headers · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-headers · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-modules · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-modules · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-modules-extra · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-modules-extra · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-rt · RHEL 8 0:4.18.0-80.11.1.rt9.156.el8_0 RHSA-2019:2741 Sep 12, 2019
kernel-rt-core · RHEL 8 0:4.18.0-80.11.1.rt9.156.el8_0 RHSA-2019:2741 Sep 12, 2019
kernel-rt-debug · RHEL 8 0:4.18.0-80.11.1.rt9.156.el8_0 RHSA-2019:2741 Sep 12, 2019
kernel-rt-debug-core · RHEL 8 0:4.18.0-80.11.1.rt9.156.el8_0 RHSA-2019:2741 Sep 12, 2019
kernel-rt-debug-devel · RHEL 8 0:4.18.0-80.11.1.rt9.156.el8_0 RHSA-2019:2741 Sep 12, 2019
kernel-rt-debug-kvm · RHEL 8 0:4.18.0-80.11.1.rt9.156.el8_0 RHSA-2019:2741 Sep 12, 2019
kernel-rt-debug-modules · RHEL 8 0:4.18.0-80.11.1.rt9.156.el8_0 RHSA-2019:2741 Sep 12, 2019
kernel-rt-debug-modules-extra · RHEL 8 0:4.18.0-80.11.1.rt9.156.el8_0 RHSA-2019:2741 Sep 12, 2019
kernel-rt-devel · RHEL 8 0:4.18.0-80.11.1.rt9.156.el8_0 RHSA-2019:2741 Sep 12, 2019
kernel-rt-kvm · RHEL 8 0:4.18.0-80.11.1.rt9.156.el8_0 RHSA-2019:2741 Sep 12, 2019
kernel-rt-modules · RHEL 8 0:4.18.0-80.11.1.rt9.156.el8_0 RHSA-2019:2741 Sep 12, 2019
kernel-rt-modules-extra · RHEL 8 0:4.18.0-80.11.1.rt9.156.el8_0 RHSA-2019:2741 Sep 12, 2019
kernel-tools · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-tools · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-tools-libs · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-tools-libs · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-tools-libs-devel · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-tools-libs-devel · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
kernel-zfcpdump · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-zfcpdump-core · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-zfcpdump-devel · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-zfcpdump-modules · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
kernel-zfcpdump-modules-extra · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
perf · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
perf · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019
python3-perf · RHEL 8 0:4.18.0-80.11.1.el8_0 RHSA-2019:2703 Sep 12, 2019
python3-perf · ol 8 0:4.18.0-80.11.1.el8_0 ELSA-2019-2703 Sep 12, 2019

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.