Red Hat Security Advisory

RHSA-2021:1376

kernel security and bug fix update

Released 2021-04-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) bpftool-3.10.0-957.72.1.el7, kernel-3.10.0-957.72.1.el7, kernel-abi-whitelists-3.10.0-957.72.1.el7 +8
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.72.1.el7
Red Hat Enterprise Linux Server EUS (v. 7.6) bpftool-3.10.0-957.72.1.el7, kernel-3.10.0-957.72.1.el7, kernel-abi-whitelists-3.10.0-957.72.1.el7 +11
Red Hat Enterprise Linux Server Optional EUS (v. 7.6) kernel-debug-devel-3.10.0-957.72.1.el7, kernel-tools-libs-devel-3.10.0-957.72.1.el7
Red Hat Virtualization 4.2 Hypervisor for RHEL 7.6 EUS kernel-devel-3.10.0-957.72.1.el7, perf-3.10.0-957.72.1.el7, python-perf-3.10.0-957.72.1.el7

Fixes 5 records

TI-2020-17210 CVE-2020-28374 · GHSA-xp87-7m9f-4cr9

In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient…

MEDIUM 45

In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an X…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.06642 Published 2021-01-13 Partial fix CWE-22

TI-2021-08860 CVE-2021-27365 · GHSA-qwp9-8pwv-6hg4

An issue was discovered in the Linux kernel through 5.11.3.

LOW 38

An issue was discovered in the Linux kernel through 5.11.3.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02097 Published 2021-03-07 Fixed CWE-787

TI-2021-08859 CVE-2021-27364 · GHSA-qh7p-rxx9-vwx2

An issue was discovered in the Linux kernel through 5.11.3.

LOW 33

An issue was discovered in the Linux kernel through 5.11.3.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00965 Published 2021-03-07 Fixed CWE-125

TI-2020-12171 CVE-2020-15436 · GHSA-pcpr-hxm8-3mj4

Use after free in linux kernel

LOW 31

Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00928 Published 2020-11-23 Partial fix CWE-416

TI-2021-08858 CVE-2021-27363 · GHSA-ghrr-3969-mcfp

An issue was discovered in the Linux kernel through 5.11.3.

LOW 22

An issue was discovered in the Linux kernel through 5.11.3.

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00711 Published 2021-03-07 Partial fix