PT-2019-20257 · Linux · Linux Kernel

Published 2019-12-25 · Updated 2019-12-25

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.4.6

Description The issue relates to various potential security problems, including buffer overflows, double frees, null pointer dereferences, and improper or missing input validations. Other fixes address deadlock issues, performance regressions, and security fixes specific to Intel CPUs and GPUs. The update also includes fixes for firmware crashes and performance issues in iwlwifi, as well as changes to WireGuard and radeon.

Recommendations For Linux kernel versions prior to 5.4.6, update to version 5.4.6 or later to resolve the issue. As a temporary workaround, consider disabling the rdmsr safe on cpu() function in smca configure() to avoid deadlock issues until a patch is available. Restrict access to vulnerable kernel modules to minimize the risk of exploitation.

Related Identifiers

MGASA-2019-0414

Affected Products

Linux Kernel

References · 8

• https://osv.dev/vulnerability/MGASA-2019-0414 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2019-0414.html · Security Note
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.4 · Note
• https://bugs.mageia.org/show_bug.cgi?id=25926 · Note
• https://bugs.mageia.org/show_bug.cgi?id=25897 · Note
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.3 · Note
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.6 · Note
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.5 · Note