Red Hat Security AdvisoryRHSA-2021:1093
kernel security, bug fix, and enhancement update
Released 2021-04-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-240.22.1.el8_3
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-240.22.1.el8_3, kernel-4.18.0-240.22.1.el8_3, kernel-abi-whitelists-4.18.0-240.22.1.el8_3 +19
Fixes 8 records
Priority HIGH 69
An issue was discovered in the Linux kernel through 5.10.11.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01365 · Published 2021-01-29 · Fixed CWE-416
Priority MEDIUM 45
In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an X…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.06642 · Published 2021-01-13 · Partial fix CWE-22
Priority LOW 38
An issue was discovered in the Linux kernel through 5.11.3.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02097 · Published 2021-03-07 · Fixed CWE-787
Priority LOW 34
A local privilege escalation was discovered in the Linux kernel before 5.10.13.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.01602 · Published 2021-02-05 · Fixed CWE-667
Priority LOW 34
In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00278 · Published 2020-12-14 · Fixed CWE-416
Priority LOW 33
An issue was discovered in the Linux kernel through 5.11.3.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00965 · Published 2021-03-07 · Fixed CWE-125
Priority LOW 26
An issue was discovered in ioapic_lazy_update_eoi in arch/x86/kvm/ioapic.c in the Linux kernel before 5.9.2.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00569 · Published 2020-11-06 · Fixed CWE-835
Priority LOW 22
An issue was discovered in the Linux kernel through 5.11.3.
CVSS 3.1MEDIUM 4.4· Local · Low privileges · No interaction · EPSS 0.00711 · Published 2021-03-07 · Partial fix