{ "cveId": "CVE-2019-9506", "url": "https://patchblox.com/security/cve/CVE-2019-9506", "summary": "CVE-2019-9506 is fixed in 73 products on 2 platforms, first by KB4512517, released August 13, 2019. It is not reported as exploited. Patch Radar priority: High.", "title": "Encryption Key Negotiation of Bluetooth Vulnerability", "description": "\u003Ch1\u003EExecutive Summary\u003C/h1\u003E\n\u003Cp\u003EMicrosoft is aware of the Bluetooth BR/EDR (basic rate/enhanced data rate, known as \u0022Bluetooth Classic\u0022) key negotiation vulnerability that exists at the hardware specification level of any BR/EDR Bluetooth device. An attacker could potentially be able to negotiate the offered key length down to 1 byte of entropy, from a maximum of 16 bytes.\u003C/p\u003E\n\u003Cp\u003ETo exploit this vulnerability, an attacker would need specialized hardware and would be limited by the range of the Bluetooth devices in use. Using this specialized equipment, they would need to be close enough to communicate and interfere with the legitimate transmissions being made wirelessly.\u003C/p\u003E\n\u003Cp\u003ECERT/CC has issued \u003Ca href=\u0022https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9506\u0022\u003ECVE-2019-9506\u003C/a\u003E and \u003Ca href=\u0022https://www.kb.cert.org/vuls/id/918987\u0022\u003EVU#918987\u003C/a\u003E for this tampering vulnerability, which has a CVSS score of 9.3.\u003C/p\u003E\n\u003Cp\u003ETo address the vulnerability Microsoft has released a software update that enforces a default 7-octet minimum key length to ensure that the key negotiation does not trivialize the encryption. This functionality is disabled by default when the update is installed. Customers must enable this functionality by setting a specific flag in the registry. When the flag is set, Windows software will read the encryption key size and reject the Bluetooth connection if it does not meet the defined minimum key size.\u003C/p\u003E\n\u003Cp\u003EIf your particular Bluetooth device or the Bluetooth radio in your Windows device, or the driver for that Bluetooth radio does not support the longer key length, this update could block connections with that device when the registry key \u003Cstrong\u003EEnableMinimumEncryptionKeySize\u003C/strong\u003E is set to a value of 1. Users who have issues connecting their Bluetooth devices after installing and enabling this functionality should check to see if their manufacturer is providing additional guidance on updates and mitigations.\u003C/p\u003E\n\u003Cp\u003E\u003Cstrong\u003ETo enable this enforcement feature by using Registry Editor, follow these steps:\u003C/strong\u003E\u003C/p\u003E\n\u003Cp\u003E\u003Cstrong\u003ENote\u003C/strong\u003E Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk. For information about how to edit the registry, view the \u0022Changing Keys and Values\u0022 Help topic in Registry Editor (Regedit.exe) or view the \u0022Add and Delete Information in the Registry\u0022 and \u0022Edit Registry Data\u0022 Help topics in Regedt32.exe.\u003C/p\u003E\n\u003Col\u003E\n\u003Cli\u003EOpen a command prompt as Administrator.\u003C/li\u003E\n\u003Cli\u003EType: \u003Ccode\u003Ereg add HKLM\\System\\CurrentControlSet\\Policies\\Hardware\\Bluetooth /v EnableMinimumEncryptionKeySize /t REG_DWORD /f /d 1\u003C/code\u003E\u003C/li\u003E\n\u003Cli\u003ERestart the computer.\u003C/li\u003E\n\u003C/ol\u003E\n\u003Cp\u003EIf you don\u0027t want to restart your computer, you will need to reset your Bluetooth device as follows:\u003C/p\u003E\n\u003Col\u003E\n\u003Cli\u003EOn the device, go to the Bluetooth Settings.\u003C/li\u003E\n\u003Cli\u003ETurn off Bluetooth.\u003C/li\u003E\n\u003Cli\u003EOpen the Device Manager and locate the Bluetooth Controller.\u003C/li\u003E\n\u003Cli\u003ERight-click on the Bluetooth Controller and select \u003Cstrong\u003EDisable device\u003C/strong\u003E.\u003C/li\u003E\n\u003Cli\u003EAfter the device is disabled, right-click again and select \u003Cstrong\u003EEnable device\u003C/strong\u003E.\u003C/li\u003E\n\u003Cli\u003ETurn on Bluetooth in Bluetooth Settings\u003C/li\u003E\n\u003C/ol\u003E\n\u003Cp\u003EComputers with incompatible Bluetooth controllers or devices may have to temporarily or permanently set EnableMinimumEncryptionKeySize = 0 until controllers, firmware or drivers can be updated or the device itself updated. Bluetooth connections on computers in this state will not be secure.\u003C/p\u003E\n\u003Cp\u003E\u003Cstrong\u003ETo disable this enforcement feature:\u003C/strong\u003E\u003C/p\u003E\n\u003Col\u003E\n\u003Cli\u003EOpen a command prompt as Administrator.\u003C/li\u003E\n\u003Cli\u003EType: \u003Ccode\u003Ereg add HKLM\\System\\CurrentControlSet\\Policies\\Hardware\\Bluetooth /v EnableMinimumEncryptionKeySize /t REG_DWORD /f /d 0\u003C/code\u003E\u003C/li\u003E\n\u003Cli\u003ERestart the computer.\u003C/li\u003E\n\u003C/ol\u003E\n\u003Ch1\u003ERecommended Actions\u003C/h1\u003E\n\u003Cp\u003EThe best protection is to keep computers up to date. Please see \u003Ca href=\u0022https://support.microsoft.com/help/4514157\u0022\u003EMicrosoft Knowledge Base Article 4514157\u003C/a\u003E for guidance on protecting Windows devices.\u003C/p\u003E\n\u003Cp\u003EIf your particular device does not support the longer key length, this update could block connections with that device. Users who have issues connecting their Bluetooth devices after installing and enabling this functionality should check to see if their manufacturer is providing additional guidance on updates and mitigations.\u003C/p\u003E\n\u003Ch1\u003EFAQ\u003C/h1\u003E\n\u003Cp\u003E\u003Cstrong\u003E1. Why is this enforcement not enabled by default?\u003C/strong\u003E\u003C/p\u003E\n\u003Cp\u003EA number of devices may not currently be able to support a longer key length and would not function with this fix enabled. Combined with the difficulty to use this attack and the need of specialized equipment and proximity to the target, this was decided to be left disabled initially to avoid any compatibility issues. The choice to enable this functionality would be left up to the user.\u003C/p\u003E\n\u003Cp\u003E\u003Cstrong\u003E2. Where can I find more information about enabling this functionality?\u003C/strong\u003E\u003C/p\u003E\n\u003Cp\u003EIf you determine that you need to enable this functionality to enforce a default 7-octet minimum key length, see \u003Ca href=\u0022https://support.microsoft.com/help/4514157\u0022\u003EMicrosoft Knowledge Base Article 4514157\u003C/a\u003E.\u003C/p\u003E\n\u003Ch1\u003EReferences\u003C/h1\u003E\n\u003Cul\u003E\n\u003Cli\u003EThank you to \u003Ca href=\u0022https://www.icasi.org\u0022\u003EICASI\u003C/a\u003E for coordinating multi-vendor response. Also see \u003Ca href=\u0022https://www.icasi.org/br-edr-encryption-key-bluetooth-vulnerability\u0022\u003EStatement from the International Consortium for Advancement of Cybersecurity on the Internet (ICASI) on the Bluetooth Vulnerability\u003C/a\u003E\u003C/li\u003E\n\u003Cli\u003E\u003Ca href=\u0022https://www.kb.cert.org/vuls/id/918987\u0022\u003ECERT/CC VU#918987\u003C/a\u003E\u003C/li\u003E\n\u003Cli\u003ESee Bluetooth SIG advisory: \u003Ca href=\u0022https://www.bluetooth.com/security/statement-key-negotiation-of-bluetooth\u0022\u003Ehttps://www.bluetooth.com/security/statement-key-negotiation-of-bluetooth\u003C/a\u003E\u003C/li\u003E\n\u003C/ul\u003E", "published": "2019-08-13T12:00:00Z", "severity": "Important", "cvss": 9.3, "epss": 0.02691, "epssPercentile": 0.85972, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "exploitabilityAssessment": "Exploitation Less Likely", "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-9506", "fixes": [ { "platform": "microsoft", "product": "Windows 10 Version 1607 for 32-bit Systems", "fixedVersion": "14393.3144", "fix": "KB4512517", "url": "https://patchblox.com/security/fix/microsoft/kb4512517", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 Version 1607 for x64-based Systems", "fixedVersion": "14393.3144", "fix": "KB4512517", "url": "https://patchblox.com/security/fix/microsoft/kb4512517", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 Version 1703 for 32-bit Systems", "fixedVersion": "15063.1988", "fix": "KB4512507", "url": "https://patchblox.com/security/fix/microsoft/kb4512507", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 Version 1703 for x64-based Systems", "fixedVersion": "15063.1988", "fix": "KB4512507", "url": "https://patchblox.com/security/fix/microsoft/kb4512507", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 Version 1709 for 32-bit Systems", "fixedVersion": "16299.1331", "fix": "KB4512516", "url": "https://patchblox.com/security/fix/microsoft/kb4512516", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 Version 1709 for ARM64-based Systems", "fixedVersion": "16299.1331", "fix": "KB4512516", "url": "https://patchblox.com/security/fix/microsoft/kb4512516", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 Version 1709 for x64-based Systems", "fixedVersion": "16299.1331", "fix": "KB4512516", "url": "https://patchblox.com/security/fix/microsoft/kb4512516", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 Version 1803 for 32-bit Systems", "fixedVersion": "17134.950", "fix": "KB4512501", "url": "https://patchblox.com/security/fix/microsoft/kb4512501", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 Version 1803 for ARM64-based Systems", "fixedVersion": "17134.950", "fix": "KB4512501", "url": "https://patchblox.com/security/fix/microsoft/kb4512501", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 Version 1803 for x64-based Systems", "fixedVersion": "17134.950", "fix": "KB4512501", "url": "https://patchblox.com/security/fix/microsoft/kb4512501", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 Version 1809 for 32-bit Systems", "fixedVersion": "17763.678", "fix": "KB4511553", "url": "https://patchblox.com/security/fix/microsoft/kb4511553", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 Version 1809 for ARM64-based Systems", "fixedVersion": "17763.678", "fix": "KB4511553", "url": "https://patchblox.com/security/fix/microsoft/kb4511553", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 Version 1809 for x64-based Systems", "fixedVersion": "17763.678", "fix": "KB4511553", "url": "https://patchblox.com/security/fix/microsoft/kb4511553", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 Version 1903 for 32-bit Systems", "fixedVersion": "18362.295", "fix": "KB4512508", "url": "https://patchblox.com/security/fix/microsoft/kb4512508", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 Version 1903 for ARM64-based Systems", "fixedVersion": "18362.295", "fix": "KB4512508", "url": "https://patchblox.com/security/fix/microsoft/kb4512508", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 Version 1903 for x64-based Systems", "fixedVersion": "18362.295", "fix": "KB4512508", "url": "https://patchblox.com/security/fix/microsoft/kb4512508", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 for 32-bit Systems", "fixedVersion": "10240.18305", "fix": "KB4512497", "url": "https://patchblox.com/security/fix/microsoft/kb4512497", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 10 for x64-based Systems", "fixedVersion": "10240.18305", "fix": "KB4512497", "url": "https://patchblox.com/security/fix/microsoft/kb4512497", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows 7 for 32-bit Systems Service Pack 1", "fixedVersion": "", "fix": "KB4512506", "url": "https://patchblox.com/security/fix/microsoft/kb4512506", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows 7 for 32-bit Systems Service Pack 1", "fixedVersion": "", "fix": "KB4512486", "url": "https://patchblox.com/security/fix/microsoft/kb4512486", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows 7 for x64-based Systems Service Pack 1", "fixedVersion": "", "fix": "KB4512506", "url": "https://patchblox.com/security/fix/microsoft/kb4512506", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows 7 for x64-based Systems Service Pack 1", "fixedVersion": "", "fix": "KB4512486", "url": "https://patchblox.com/security/fix/microsoft/kb4512486", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows 8.1 for 32-bit systems", "fixedVersion": "", "fix": "KB4512488", "url": "https://patchblox.com/security/fix/microsoft/kb4512488", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows 8.1 for 32-bit systems", "fixedVersion": "", "fix": "KB4512489", "url": "https://patchblox.com/security/fix/microsoft/kb4512489", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows 8.1 for x64-based systems", "fixedVersion": "", "fix": "KB4512488", "url": "https://patchblox.com/security/fix/microsoft/kb4512488", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows 8.1 for x64-based systems", "fixedVersion": "", "fix": "KB4512489", "url": "https://patchblox.com/security/fix/microsoft/kb4512489", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows RT 8.1", "fixedVersion": "", "fix": "KB4512488", "url": "https://patchblox.com/security/fix/microsoft/kb4512488", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1", "fixedVersion": "", "fix": "KB4512506", "url": "https://patchblox.com/security/fix/microsoft/kb4512506", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1", "fixedVersion": "", "fix": "KB4512486", "url": "https://patchblox.com/security/fix/microsoft/kb4512486", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1", "fixedVersion": "", "fix": "KB4512506", "url": "https://patchblox.com/security/fix/microsoft/kb4512506", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1", "fixedVersion": "", "fix": "KB4512486", "url": "https://patchblox.com/security/fix/microsoft/kb4512486", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)", "fixedVersion": "", "fix": "KB4512506", "url": "https://patchblox.com/security/fix/microsoft/kb4512506", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)", "fixedVersion": "", "fix": "KB4512486", "url": "https://patchblox.com/security/fix/microsoft/kb4512486", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2012", "fixedVersion": "", "fix": "KB4512482", "url": "https://patchblox.com/security/fix/microsoft/kb4512482", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2012", "fixedVersion": "", "fix": "KB4512518", "url": "https://patchblox.com/security/fix/microsoft/kb4512518", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2012 (Server Core installation)", "fixedVersion": "", "fix": "KB4512482", "url": "https://patchblox.com/security/fix/microsoft/kb4512482", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2012 (Server Core installation)", "fixedVersion": "", "fix": "KB4512518", "url": "https://patchblox.com/security/fix/microsoft/kb4512518", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2012 R2", "fixedVersion": "", "fix": "KB4512488", "url": "https://patchblox.com/security/fix/microsoft/kb4512488", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2012 R2", "fixedVersion": "", "fix": "KB4512489", "url": "https://patchblox.com/security/fix/microsoft/kb4512489", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "fixedVersion": "", "fix": "KB4512488", "url": "https://patchblox.com/security/fix/microsoft/kb4512488", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "fixedVersion": "", "fix": "KB4512489", "url": "https://patchblox.com/security/fix/microsoft/kb4512489", "released": "2019-08-13T12:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2016", "fixedVersion": "14393.3144", "fix": "KB4512517", "url": "https://patchblox.com/security/fix/microsoft/kb4512517", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2016 (Server Core installation)", "fixedVersion": "14393.3144", "fix": "KB4512517", "url": "https://patchblox.com/security/fix/microsoft/kb4512517", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2019", "fixedVersion": "17763.678", "fix": "KB4511553", "url": "https://patchblox.com/security/fix/microsoft/kb4511553", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows Server 2019 (Server Core installation)", "fixedVersion": "17763.678", "fix": "KB4511553", "url": "https://patchblox.com/security/fix/microsoft/kb4511553", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows Server, version 1803 (Server Core Installation)", "fixedVersion": "17134.950", "fix": "KB4512501", "url": "https://patchblox.com/security/fix/microsoft/kb4512501", "released": "2019-08-13T00:00:00Z" }, { "platform": "microsoft", "product": "Windows Server, version 1903 (Server Core installation)", "fixedVersion": "18362.295", "fix": "KB4512508", "url": "https://patchblox.com/security/fix/microsoft/kb4512508", "released": "2019-08-13T00:00:00Z" }, { "platform": "linux", "product": "bpftool", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "bpftool", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-abi-whitelists", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-abi-whitelists", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-core", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-core", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-cross-headers", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-debug", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-debug", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-debug-core", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-debug-core", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-debug-devel", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-debug-devel", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-debug-modules", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-debug-modules", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-debug-modules-extra", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-debug-modules-extra", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-devel", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-devel", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-doc", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-doc", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-headers", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-modules", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-modules", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-modules-extra", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-modules-extra", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-rt", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.rt24.93.el8", "fix": "RHSA-2019:3309", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3309", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-rt-core", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.rt24.93.el8", "fix": "RHSA-2019:3309", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3309", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-rt-debug", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.rt24.93.el8", "fix": "RHSA-2019:3309", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3309", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-rt-debug-core", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.rt24.93.el8", "fix": "RHSA-2019:3309", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3309", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-rt-debug-devel", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.rt24.93.el8", "fix": "RHSA-2019:3309", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3309", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-rt-debug-kvm", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.rt24.93.el8", "fix": "RHSA-2019:3309", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3309", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-rt-debug-modules", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.rt24.93.el8", "fix": "RHSA-2019:3309", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3309", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-rt-debug-modules-extra", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.rt24.93.el8", "fix": "RHSA-2019:3309", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3309", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-rt-devel", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.rt24.93.el8", "fix": "RHSA-2019:3309", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3309", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-rt-kvm", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.rt24.93.el8", "fix": "RHSA-2019:3309", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3309", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-rt-modules", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.rt24.93.el8", "fix": "RHSA-2019:3309", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3309", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-rt-modules-extra", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.rt24.93.el8", "fix": "RHSA-2019:3309", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3309", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-tools", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-tools", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-tools-libs", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-tools-libs", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-tools-libs-devel", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-tools-libs-devel", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-zfcpdump-core", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-zfcpdump-devel", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-zfcpdump-modules", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "kernel-zfcpdump-modules-extra", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "perf", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "perf", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" }, { "platform": "linux", "product": "python3-perf", "release": "RHEL 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "RHSA-2019:3517", "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3517", "released": "2019-11-05T00:00:00Z" }, { "platform": "linux", "product": "python3-perf", "release": "ol 8", "fixedVersion": "0:4.18.0-147.el8", "fix": "ELSA-2019-3517", "url": "https://patchblox.com/security/fix/linux/elsa-2019-3517", "released": "2019-11-14T00:00:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-07T18:46:35Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }