Red Hat Security AdvisoryRHSA-2021:0774
kernel-rt security and bug fix update
Released 2021-03-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Real Time EUS (v. 8.2) kernel-rt-4.18.0-193.46.1.rt13.96.el8_2, kernel-rt-core-4.18.0-193.46.1.rt13.96.el8_2, kernel-rt-debug-4.18.0-193.46.1.rt13.96.el8_2 +7
- Red Hat Enterprise Linux Real Time for NFV EUS (v. 8.2) kernel-rt-4.18.0-193.46.1.rt13.96.el8_2, kernel-rt-core-4.18.0-193.46.1.rt13.96.el8_2, kernel-rt-debug-4.18.0-193.46.1.rt13.96.el8_2 +9
Fixes 5 records
Priority MEDIUM 42
A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.06692 · Published 2020-11-17 · Partial fix CWE-330
Priority LOW 36
A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0112 · Published 2020-12-09 · Fixed CWE-416
Priority LOW 34
A flaw was found in the Linux kernel.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00306 · Published 2020-12-03 · Partial fix CWE-416
Priority LOW 33
In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00219 · Published 2020-12-14 · Partial fix CWE-763
Priority LOW 28
In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_fi…
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00566 · Published 2020-09-09 · Partial fix CWE-120
THREATIST.IORead the docs