# CVE-2019-15099: kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... CVE-2019-15099 is fixed in 37 products on 1 platform, first by RHSA-2020:1769, released April 28, 2020. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2019-15099 - Priority: High - CVSS: 7.5 (Important) - EPSS: 0.0377 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Apr 28, 2020 ## Description The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: use-after-free in __blk_add_trace in kernel/trace/blktrace.c (CVE-2019-19768) * kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence (CVE-2018-16871) * kernel: memory leak in the kernel_read_file function in fs/exec.c allows to cause a denial of service (CVE-2019-8980) * kernel: unprivileged users able to create RAW sockets in AF_IEEE802154 network protocol. (CVE-2019-17053) * kernel: unprivileged users able to create RAW sockets in AF_ISDN network protocol. (CVE-2019-17055) * kernel: integer overflow in tcp_ack_update_rtt in net/ipv4/tcp_input.c (CVE-2019-18805) * kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver (CVE-2019-19534) * kernel: some ipv6 protocols not encrypted over ipsec tunnel. (CVE-2020-1749) * Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR (CVE-2019-10639) * kernel: An out-of-bounds read in drivers/scsi/qedi/qedi_dbg.c leading to crash or information disclosure (CVE-2019-15090) * kernel: a NULL pointer dereference in drivers/net/wireless/ath/ath10k/usb.c leads to a crash (CVE-2019-15099) * kernel: Null pointer dereference in the sound/usb/line6/pcm.c (CVE-2019-15221) * kernel: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows for a DoS (CVE-2019-19057) * kernel: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel (DOS) (CVE-2019-19073) * kernel: a memory leak in the ath9k management function in allows local DoS (CVE-2019-19074) * kernel: when cpu.cfs_quota_us is used allows attackers to cause a denial of service against non-cpu-bound applications (CVE-2019-19922) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * RT: update RT source tree to the RHEL-8.2 tree (BZ#1708716) * KVM-RT guest fails boot with emulatorsched (BZ#1712781) * 8 vCPU guest need max latency < 20 us with stress [RT-8.2] (BZ#1757165) * Request nx_huge_pages=N as default value to avoid kvm-rt guest large latency spike [rt-8] (BZ#1788352) * RT: Add rpm Provide of 'kernel' to indicate that this is a kernel package (BZ#1796284) * [RHEL8] RT kernel signed by test certificate and not Red Hat Secure Boot (BZ#1806871) Enhancement(s): * update to the upstream 5.x RT patchset (BZ#1680161) ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | bpftool RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | bpftool ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-abi-whitelists RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-abi-whitelists ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-core RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-core ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-cross-headers ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-debug RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-debug ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-debug-core RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-debug-core ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-debug-devel RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-debug-devel ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-debug-modules RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-debug-modules ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-debug-modules-extra RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-debug-modules-extra ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-devel RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-devel ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-doc RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-doc ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-headers ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-modules RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-modules ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-modules-extra RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-modules-extra ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-rt RHEL 8 | 0:4.18.0-193.rt13.51.el8 | [RHSA-2020:1567](https://patchblox.com/security/data/fix/linux/rhsa-2020-1567.md) | Apr 28, 2020 | | Linux | kernel-rt-core RHEL 8 | 0:4.18.0-193.rt13.51.el8 | [RHSA-2020:1567](https://patchblox.com/security/data/fix/linux/rhsa-2020-1567.md) | Apr 28, 2020 | | Linux | kernel-rt-debug RHEL 8 | 0:4.18.0-193.rt13.51.el8 | [RHSA-2020:1567](https://patchblox.com/security/data/fix/linux/rhsa-2020-1567.md) | Apr 28, 2020 | | Linux | kernel-rt-debug-core RHEL 8 | 0:4.18.0-193.rt13.51.el8 | [RHSA-2020:1567](https://patchblox.com/security/data/fix/linux/rhsa-2020-1567.md) | Apr 28, 2020 | | Linux | kernel-rt-debug-devel RHEL 8 | 0:4.18.0-193.rt13.51.el8 | [RHSA-2020:1567](https://patchblox.com/security/data/fix/linux/rhsa-2020-1567.md) | Apr 28, 2020 | | Linux | kernel-rt-debug-kvm RHEL 8 | 0:4.18.0-193.rt13.51.el8 | [RHSA-2020:1567](https://patchblox.com/security/data/fix/linux/rhsa-2020-1567.md) | Apr 28, 2020 | | Linux | kernel-rt-debug-modules RHEL 8 | 0:4.18.0-193.rt13.51.el8 | [RHSA-2020:1567](https://patchblox.com/security/data/fix/linux/rhsa-2020-1567.md) | Apr 28, 2020 | | Linux | kernel-rt-debug-modules-extra RHEL 8 | 0:4.18.0-193.rt13.51.el8 | [RHSA-2020:1567](https://patchblox.com/security/data/fix/linux/rhsa-2020-1567.md) | Apr 28, 2020 | | Linux | kernel-rt-devel RHEL 8 | 0:4.18.0-193.rt13.51.el8 | [RHSA-2020:1567](https://patchblox.com/security/data/fix/linux/rhsa-2020-1567.md) | Apr 28, 2020 | | Linux | kernel-rt-kvm RHEL 8 | 0:4.18.0-193.rt13.51.el8 | [RHSA-2020:1567](https://patchblox.com/security/data/fix/linux/rhsa-2020-1567.md) | Apr 28, 2020 | | Linux | kernel-rt-modules RHEL 8 | 0:4.18.0-193.rt13.51.el8 | [RHSA-2020:1567](https://patchblox.com/security/data/fix/linux/rhsa-2020-1567.md) | Apr 28, 2020 | | Linux | kernel-rt-modules-extra RHEL 8 | 0:4.18.0-193.rt13.51.el8 | [RHSA-2020:1567](https://patchblox.com/security/data/fix/linux/rhsa-2020-1567.md) | Apr 28, 2020 | | Linux | kernel-tools RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-tools ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-tools-libs RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-tools-libs ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-tools-libs-devel RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-tools-libs-devel ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | kernel-zfcpdump RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-zfcpdump-core RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-zfcpdump-devel RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-zfcpdump-modules RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | kernel-zfcpdump-modules-extra RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | perf RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | perf ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | | Linux | python3-perf RHEL 8 | 0:4.18.0-193.el8 | [RHSA-2020:1769](https://patchblox.com/security/data/fix/linux/rhsa-2020-1769.md) | Apr 28, 2020 | | Linux | python3-perf ol 8 | 0:4.18.0-193.el8 | [ELSA-2020-1769](https://patchblox.com/security/data/fix/linux/elsa-2020-1769.md) | May 5, 2020 | --- Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.