Red Hat Security AdvisoryRHSA-2021:0857
kernel-rt security and bug fix update
Released 2021-03-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux for Real Time (v. 7) kernel-rt-3.10.0-1160.21.1.rt56.1158.el7, kernel-rt-debug-3.10.0-1160.21.1.rt56.1158.el7, kernel-rt-debug-devel-3.10.0-1160.21.1.rt56.1158.el7 +4
- Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-1160.21.1.rt56.1158.el7, kernel-rt-debug-3.10.0-1160.21.1.rt56.1158.el7, kernel-rt-debug-devel-3.10.0-1160.21.1.rt56.1158.el7 +7
Fixes 11 records
Priority MEDIUM 45
In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an X…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.06642 · Published 2021-01-13 · Partial fix CWE-22
Priority MEDIUM 42
A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.06692 · Published 2020-11-17 · Partial fix CWE-330
Priority LOW 37
A flaw was found in the Linux kernel in versions before 5.9-rc7.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02433 · Published 2020-10-13 · Partial fix CWE-319
Priority LOW 36
A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0112 · Published 2020-12-09 · Fixed CWE-416
Priority LOW 35
In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CI…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00617 · Published 2020-01-14 · Partial fix CWE-416
Priority LOW 34
A flaw was found in the Linux kernel.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00306 · Published 2020-12-03 · Partial fix CWE-416
Priority LOW 31
In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00504 · Published 2019-12-03 · Partial fix CWE-787
Priority LOW 28
In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_fi…
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00566 · Published 2020-09-09 · Partial fix CWE-120
Priority LOW 25
A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00339 · Published 2021-03-10 · Fixed CWE-400
Priority LOW 25
In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00492 · Published 2020-09-17 · Fixed CWE-125
Priority LOW 20
A flaw was found in the Linux kernel.
CVSS 3.1MEDIUM 4.1· Local · High privileges · No interaction · EPSS 0.00439 · Published 2020-12-02 · Partial fix CWE-416
THREATIST.IORead the docs