Red Hat Security AdvisoryRHSA-2021:1531
kernel security and bug fix update
Released 2021-05-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) bpftool-3.10.0-1062.49.1.el7, kernel-3.10.0-1062.49.1.el7, kernel-abi-whitelists-3.10.0-1062.49.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.49.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.7) bpftool-3.10.0-1062.49.1.el7, kernel-3.10.0-1062.49.1.el7, kernel-abi-whitelists-3.10.0-1062.49.1.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.7) kernel-debug-devel-3.10.0-1062.49.1.el7, kernel-tools-libs-devel-3.10.0-1062.49.1.el7
Fixes 7 records
Priority MEDIUM 45
In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an X…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.06642 · Published 2021-01-13 · Partial fix CWE-22
Priority MEDIUM 42
A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.06692 · Published 2020-11-17 · Partial fix CWE-330
Priority LOW 38
An issue was discovered in the Linux kernel through 5.11.3.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02097 · Published 2021-03-07 · Fixed CWE-787
Priority LOW 33
An issue was discovered in the Linux kernel through 5.11.3.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00965 · Published 2021-03-07 · Fixed CWE-125
Priority LOW 31
In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00504 · Published 2019-12-03 · Partial fix CWE-787
Priority LOW 28
In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_fi…
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00566 · Published 2020-09-09 · Partial fix CWE-120
Priority LOW 22
An issue was discovered in the Linux kernel through 5.11.3.
CVSS 3.1MEDIUM 4.4· Local · Low privileges · No interaction · EPSS 0.00711 · Published 2021-03-07 · Partial fix
THREATIST.IORead the docs