{"id":"MGASA-2020-0036","summary":"Updated kernel packages fix security vulnerability","details":"This update is based on upstream 5.4.10 and fixes at least the following\nsecurity issues:\n\next4_empty_dir in fs/ext4/namei.c in the Linux kernel through 5.3.12 allows\na NULL pointer dereference because ext4_read_dirblock(inode,0,DIRENT_HTREE)\ncan be zero. (CVE-2019-19037)\n\nIt also fixes various potential security issues related to buffer overflows,\ndouble frees, NUll  pointer dereferences, improper / missing input\nvalidations and so on.\n\nOther fixes added in this update:\n- Revert 'drm/amdgpu: Set no-retry as default.', fixing amdgpu hang\n  on Raven Ridge gpus (mga#25882)\n- drm/i915/gt: Detect if we miss WaIdleLiteRestore, fixes or at least\n  works around gpu hang (mga#25930)\n- 3rdparty/rtl8812au: update to v5.6.4.2 (mga#25982)\n- add support for RTL8117 ethernet\n- rtl8xxxu: Add support for Edimax EW-7611ULB\n- mountpoint_last(): fix the treatment of LAST_BIND\n- HID: intel-ish-hid: ipc: Add Comet Lake H PCI device ID\n- HID: intel-ish-hid: ipc: Add Tiger Lake PCI device ID\n- HID: wacom: Recognize new MobileStudio Pro PID\n- updates to the arm64 defconfigs:\n  - Enable some EFI stuff on arm64 (mga#26003)\n  - Enable a lot of missing things on arm64 kernels (including ACPI\n     and Amazon network driver)\n  - Disable debug info on arm64 (mga#26015)\n  - reduce difference between arm64 and x86_64 defconfigs\n\nWireGuard kernel module has been updated to 0.0.20200105 and the tools\nhas been updated to 1.0.20200102.\n\nFor other fixes in this update, see the referenced changelogs.\n","modified":"2026-04-16T01:48:14.370036286Z","published":"2020-01-13T16:51:20Z","upstream":["CVE-2019-19037"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2020-0036.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=26049"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=25882"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=25930"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=25982"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=26003"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=26015"},{"type":"WEB","url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.7"},{"type":"WEB","url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.8"},{"type":"WEB","url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.9"},{"type":"WEB","url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.10"}],"affected":[{"package":{"name":"kernel","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/kernel?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.10-1.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2020-0036.json"}},{"package":{"name":"kmod-virtualbox","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/kmod-virtualbox?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-18.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2020-0036.json"}},{"package":{"name":"kmod-xtables-addons","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/kmod-xtables-addons?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7-8.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2020-0036.json"}},{"package":{"name":"wireguard-tools","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/wireguard-tools?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.20200102-1.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2020-0036.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}