Red Hat Security AdvisoryRHSA-2021:0184
kernel security and bug fix update
Released 2021-01-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v. 8.1)
- Red Hat Enterprise Linux BaseOS EUS (v. 8.1) kernel-4.18.0-147.38.1.el8_1, kernel-core-4.18.0-147.38.1.el8_1, kernel-debug-4.18.0-147.38.1.el8_1 +12
Fixes 2 records
Priority LOW 28
In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_fi…
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00566 · Published 2020-09-09 · Partial fix CWE-120
Priority LOW 26
The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.05228 · Published 2020-07-30 · Partial fix CWE-330