Red Hat Security AdvisoryRHSA-2021:0760
kernel security and bug fix update
Released 2021-03-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.4) kernel-3.10.0-693.82.1.el7, kernel-abi-whitelists-3.10.0-693.82.1.el7, kernel-debug-3.10.0-693.82.1.el7 +7
- Red Hat Enterprise Linux Server E4S (v. 7.4) kernel-3.10.0-693.82.1.el7, kernel-abi-whitelists-3.10.0-693.82.1.el7, kernel-bootwrapper-3.10.0-693.82.1.el7 +8
- Red Hat Enterprise Linux Server Optional AUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.82.1.el7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.4) kernel-debug-devel-3.10.0-693.82.1.el7, kernel-tools-libs-devel-3.10.0-693.82.1.el7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.82.1.el7
- Red Hat Enterprise Linux Server TUS (v. 7.4) kernel-3.10.0-693.82.1.el7, kernel-abi-whitelists-3.10.0-693.82.1.el7, kernel-debug-3.10.0-693.82.1.el7 +7
Fixes 2 records
Priority LOW 31
A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00277 · Published 2020-09-09 · Partial fix CWE-367
Priority LOW 31
In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00361 · Published 2020-08-19 · Partial fix CWE-732
