{"id":"MGASA-2019-0414","aliases":[],"status":"published","title":"Updated kernel packages fix security vulnerabilities","description":"This update is based on upstream 5.4.6 and fixes various potential\nsecurity issues related to buffer overflows, double frees, NUll  pointer\ndereferences, improper / missing input validations and so on. It also\nadds other bugfixes all over the kernel.\n\nOther fixes added in this update:\n- x86/MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure(),\n  fixing an deadlock issue.\n- x86/mm: Split vmalloc_sync_all(), fixing up big performance\n  regressions in some x86_64 workloads \n  (example: reaim.jobs_per_min -79.7% regression) \n- The Intel cpu/gpu specific security fixes in upstream 5.3.11 broke\n  RC6 and that prevents CPUs from entering C-states, causing higher\n  power consumption. This update adds upstream fixes to restore\n  RC6 to a working state (fdo#112315)\n- radeon changes in upstream 5.4 to remove the 'need_dma32 flag' has\n  been reverted as it caused radeon to malfunction on 32bit kernels\n- iwlwifi fixes for firmware crashes (mga#25926), failures on warm\n  reboot, and performance fixes\n\nWireGuard has been updated to 0.0.20191219.\n\nFor other fixes in this update, see the referenced changelogs.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2019-12-25T22:57:53Z","modified":"2026-04-16T04:26:08Z","fixes":[{"ecosystem":"Mageia:7","package":"kernel","fixed_in":["5.4.6-2.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"kmod-virtualbox","fixed_in":["6.0.14-16.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"kmod-xtables-addons","fixed_in":["3.7-6.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"wireguard-tools","fixed_in":["0.0.20191219-1.mga7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:7","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.6-2.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.14-16.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7-6.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"wireguard-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20191219-1.mga7"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2019-0414.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25897","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25926","tags":["report"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.3","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.4","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.5","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.6","tags":["web"]}],"sources":{"osv":[{"id":"MGASA-2019-0414","title":"Updated kernel packages fix security vulnerabilities","description":"This update is based on upstream 5.4.6 and fixes various potential\nsecurity issues related to buffer overflows, double frees, NUll  pointer\ndereferences, improper / missing input validations and so on. It also\nadds other bugfixes all over the kernel.\n\nOther fixes added in this update:\n- x86/MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure(),\n  fixing an deadlock issue.\n- x86/mm: Split vmalloc_sync_all(), fixing up big performance\n  regressions in some x86_64 workloads \n  (example: reaim.jobs_per_min -79.7% regression) \n- The Intel cpu/gpu specific security fixes in upstream 5.3.11 broke\n  RC6 and that prevents CPUs from entering C-states, causing higher\n  power consumption. This update adds upstream fixes to restore\n  RC6 to a working state (fdo#112315)\n- radeon changes in upstream 5.4 to remove the 'need_dma32 flag' has\n  been reverted as it caused radeon to malfunction on 32bit kernels\n- iwlwifi fixes for firmware crashes (mga#25926), failures on warm\n  reboot, and performance fixes\n\nWireGuard has been updated to 0.0.20191219.\n\nFor other fixes in this update, see the referenced changelogs.\n","status":"published","published":"2019-12-25T22:57:53Z","modified":"2026-04-16T04:26:08.993893Z","updated_at":"2026-11-02T15:49:41.151324Z"}]}}