kernel-3.10.0-1127.18.2.el7

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: kernel: DAX hugepages not considered during mremap (CVE-2020-10757)

* kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in drivers/net/wireless/marvell/mwifiex/scan.c (CVE-2020-12653)

* kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c (CVE-2020-12654)

* kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver (CVE-2019-19527)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* scsi: ibmvfc: Avoid loss of all paths during SVC node reboot

* Error messages related to hwrm observed for BCM 57504 under dmesg

* kernel: provide infrastructure to support dual-signing of the kernel (foundation to help address CVE-2020-10713)

* Request: retrofit kernel commit f82b4b6 .

* kipmi thread high CPU consumption when performing BMC firmware upgrade

* virtio-blk: fix hw_queue stopped on arbitrary error (kvm)

* infinite blocked waiting on inode_dio_wait in nfs

* http request is taking more time for endpoint running on different host via nodeport service

* ext4: change LRU to round-robin in extent status tree shrinker

* libaio is returning duplicate events

* After upgrade to 3.9.89 pod containers with CPU limits fail to start due to cgroup error

* Fix dpdk regression

CVE-2019-19527
In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e.
CVE-2020-10713
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
CVE-2020-10757
A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.
CVE-2020-12653
An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.
CVE-2020-12654
An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy, aka CID-3a9b153c5591.