# CVE-2019-9458: bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... CVE-2019-9458 is fixed in 37 products on 1 platform, first by RHSA-2020:4431, released November 4, 2020. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2019-9458 - Priority: High - CVSS: 7.0 (Moderate) - EPSS: 0.0017 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Nov 4, 2020 ## Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: use after free in the video driver leads to local privilege escalation (CVE-2019-9458) * kernel: use-after-free in drivers/bluetooth/hci_ldisc.c (CVE-2019-15917) * kernel: out-of-bounds access in function hclge_tm_schd_mode_vnet_base_cfg (CVE-2019-15925) * kernel: memory leak in ccp_run_sha_cmd() (CVE-2019-18808) * kernel: Denial Of Service in the __ipmi_bmc_register() (CVE-2019-19046) * kernel: out-of-bounds write in ext4_xattr_set_entry (CVE-2019-19319) * Kernel: kvm: OOB memory write via kvm_dev_ioctl_get_cpuid (CVE-2019-19332) * kernel: use-after-free in ext4_put_super (CVE-2019-19447) * kernel: a malicious USB device in the drivers/input/ff-memless.c leads to use-after-free (CVE-2019-19524) * kernel: race condition caused by a malicious USB device in the USB character device driver layer (CVE-2019-19537) * kernel: use-after-free in serial_ir_init_module() (CVE-2019-19543) * kernel: use-after-free in __ext4_expand_extra_isize and ext4_xattr_set_entry (CVE-2019-19767) * kernel: use-after-free in debugfs_remove (CVE-2019-19770) * kernel: out-of-bounds write via crafted keycode table (CVE-2019-20636) * kernel: possible use-after-free due to a race condition in cdev_get (CVE-2020-0305) * kernel: out-of-bounds read in in vc_do_resize function (CVE-2020-8647) * kernel: use-after-free in n_tty_receive_buf_common function (CVE-2020-8648) * kernel: invalid read location in vgacon_invert_region function (CVE-2020-8649) * kernel: uninitialized kernel data leak in userspace coredumps (CVE-2020-10732) * kernel: SELinux netlink permission check bypass (CVE-2020-10751) * kernel: out-of-bounds write in mpol_parse_str (CVE-2020-11565) * kernel: mishandles invalid descriptors in drivers/media/usb/gspca/xirlink_cit.c (CVE-2020-11668) * kernel: buffer overflow in mt76_add_fragment function (CVE-2020-12465) * kernel: xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write which could result in crash and data coruption (CVE-2020-12659) * kernel: sg_write function lacks an sg_remove_request call in a certain failure case (CVE-2020-12770) * kernel: possible to send arbitrary signals to a privileged (suidroot) parent process (CVE-2020-12826) * kernel: referencing inode of removed superblock in get_futex_key() causes UAF (CVE-2020-14381) * kernel: soft-lockups in iov_iter_copy_from_user_atomic() could result in DoS (CVE-2020-25641) * kernel: kernel pointer leak due to WARN_ON statement in video driver leads to local information disclosure (CVE-2019-9455) * kernel: null pointer dereference in dlpar_parse_cc_property (CVE-2019-12614) * kernel: null-pointer dereference in drivers/net/fjes/fjes_main.c (CVE-2019-16231) * kernel: null pointer dereference in drivers/scsi/qla2xxx/qla_os.c (CVE-2019-16233) * kernel: memory leak in af9005_identify_state() function (CVE-2019-18809) * kernel: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function (CVE-2019-19056) * kernel: memory leak in the crypto_report() function (CVE-2019-19062) * kernel: Two memory leaks in the rtl_usb_probe() function (CVE-2019-19063) * kernel: A memory leak in the rtl8xxxu_submit_int_urb() function (CVE-2019-19068) * kernel: A memory leak in the predicate_parse() function (CVE-2019-19072) * kernel: information leak bug caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c (CVE-2019-19533) * kernel: Null pointer dereference in drop_sysctl_table() (CVE-2019-20054) * kernel: kernel stack information leak on s390/s390x (CVE-2020-10773) * kernel: possibility of memory disclosure when reading the file /proc/sys/kernel/rh_features (CVE-2020-10774) * kernel: vhost-net: stack overflow in get_raw_socket while checking sk_family field (CVE-2020-10942) * kernel: sync of excessive duration via an XFS v5 image with crafted metadata (CVE-2020-12655) ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | bpftool RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | bpftool ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-abi-whitelists RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-abi-whitelists ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-core RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-core ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-cross-headers ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-debug RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-debug ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-debug-core RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-debug-core ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-debug-devel RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-debug-devel ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-debug-modules RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-debug-modules ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-debug-modules-extra RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-debug-modules-extra ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-devel RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-devel ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-doc RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-doc ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-headers ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-modules RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-modules ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-modules-extra RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-modules-extra ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-rt RHEL 8 | 0:4.18.0-240.rt7.54.el8 | [RHSA-2020:4609](https://patchblox.com/security/data/fix/linux/rhsa-2020-4609.md) | Nov 4, 2020 | | Linux | kernel-rt-core RHEL 8 | 0:4.18.0-240.rt7.54.el8 | [RHSA-2020:4609](https://patchblox.com/security/data/fix/linux/rhsa-2020-4609.md) | Nov 4, 2020 | | Linux | kernel-rt-debug RHEL 8 | 0:4.18.0-240.rt7.54.el8 | [RHSA-2020:4609](https://patchblox.com/security/data/fix/linux/rhsa-2020-4609.md) | Nov 4, 2020 | | Linux | kernel-rt-debug-core RHEL 8 | 0:4.18.0-240.rt7.54.el8 | [RHSA-2020:4609](https://patchblox.com/security/data/fix/linux/rhsa-2020-4609.md) | Nov 4, 2020 | | Linux | kernel-rt-debug-devel RHEL 8 | 0:4.18.0-240.rt7.54.el8 | [RHSA-2020:4609](https://patchblox.com/security/data/fix/linux/rhsa-2020-4609.md) | Nov 4, 2020 | | Linux | kernel-rt-debug-kvm RHEL 8 | 0:4.18.0-240.rt7.54.el8 | [RHSA-2020:4609](https://patchblox.com/security/data/fix/linux/rhsa-2020-4609.md) | Nov 4, 2020 | | Linux | kernel-rt-debug-modules RHEL 8 | 0:4.18.0-240.rt7.54.el8 | [RHSA-2020:4609](https://patchblox.com/security/data/fix/linux/rhsa-2020-4609.md) | Nov 4, 2020 | | Linux | kernel-rt-debug-modules-extra RHEL 8 | 0:4.18.0-240.rt7.54.el8 | [RHSA-2020:4609](https://patchblox.com/security/data/fix/linux/rhsa-2020-4609.md) | Nov 4, 2020 | | Linux | kernel-rt-devel RHEL 8 | 0:4.18.0-240.rt7.54.el8 | [RHSA-2020:4609](https://patchblox.com/security/data/fix/linux/rhsa-2020-4609.md) | Nov 4, 2020 | | Linux | kernel-rt-kvm RHEL 8 | 0:4.18.0-240.rt7.54.el8 | [RHSA-2020:4609](https://patchblox.com/security/data/fix/linux/rhsa-2020-4609.md) | Nov 4, 2020 | | Linux | kernel-rt-modules RHEL 8 | 0:4.18.0-240.rt7.54.el8 | [RHSA-2020:4609](https://patchblox.com/security/data/fix/linux/rhsa-2020-4609.md) | Nov 4, 2020 | | Linux | kernel-rt-modules-extra RHEL 8 | 0:4.18.0-240.rt7.54.el8 | [RHSA-2020:4609](https://patchblox.com/security/data/fix/linux/rhsa-2020-4609.md) | Nov 4, 2020 | | Linux | kernel-tools RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-tools ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-tools-libs RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-tools-libs ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-tools-libs-devel RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-tools-libs-devel ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | kernel-zfcpdump RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-zfcpdump-core RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-zfcpdump-devel RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-zfcpdump-modules RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | kernel-zfcpdump-modules-extra RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | perf RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | perf ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | | Linux | python3-perf RHEL 8 | 0:4.18.0-240.el8 | [RHSA-2020:4431](https://patchblox.com/security/data/fix/linux/rhsa-2020-4431.md) | Nov 4, 2020 | | Linux | python3-perf ol 8 | 0:4.18.0-240.el8 | [ELSA-2020-4431](https://patchblox.com/security/data/fix/linux/elsa-2020-4431.md) | Nov 10, 2020 | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo