Red Hat Security AdvisoryRHSA-2021:0526
kernel security and bug fix update
Released 2021-02-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) bpftool-3.10.0-1062.45.1.el7, kernel-3.10.0-1062.45.1.el7, kernel-abi-whitelists-3.10.0-1062.45.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.45.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.7) bpftool-3.10.0-1062.45.1.el7, kernel-3.10.0-1062.45.1.el7, kernel-abi-whitelists-3.10.0-1062.45.1.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.7) kernel-debug-devel-3.10.0-1062.45.1.el7, kernel-tools-libs-devel-3.10.0-1062.45.1.el7
Fixes 2 records
Priority LOW 31
A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00277 · Published 2020-09-09 · Partial fix CWE-367
Priority LOW 31
In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00361 · Published 2020-08-19 · Partial fix CWE-732
