Red Hat Security AdvisoryRHSA-2021:0878
kernel security, bug fix, and enhancement update
Released 2021-03-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) bpftool-3.10.0-957.70.1.el7, kernel-3.10.0-957.70.1.el7, kernel-abi-whitelists-3.10.0-957.70.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.70.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.6) bpftool-3.10.0-957.70.1.el7, kernel-3.10.0-957.70.1.el7, kernel-abi-whitelists-3.10.0-957.70.1.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.6) kernel-debug-devel-3.10.0-957.70.1.el7, kernel-tools-libs-devel-3.10.0-957.70.1.el7
- Red Hat Virtualization 4.2 Hypervisor for RHEL 7.6 EUS kernel-devel-3.10.0-957.70.1.el7, perf-3.10.0-957.70.1.el7, python-perf-3.10.0-957.70.1.el7
Fixes 4 records
Priority LOW 36
A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0112 · Published 2020-12-09 · Fixed CWE-416
Priority LOW 34
A flaw was found in the Linux kernel.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00306 · Published 2020-12-03 · Partial fix CWE-416
Priority LOW 31
A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00277 · Published 2020-09-09 · Partial fix CWE-367
Priority LOW 31
In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00361 · Published 2020-08-19 · Partial fix CWE-732