Red Hat Security AdvisoryRHSA-2021:2185
kernel security and bug fix update
Released 2021-06-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v. 8.2) kernel-tools-libs-devel-4.18.0-193.56.1.el8_2
- Red Hat Enterprise Linux BaseOS EUS (v. 8.2) bpftool-4.18.0-193.56.1.el8_2, kernel-4.18.0-193.56.1.el8_2, kernel-abi-whitelists-4.18.0-193.56.1.el8_2 +19
Fixes 4 records
Priority MEDIUM 45
In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an X…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.06642 · Published 2021-01-13 · Partial fix CWE-22
Priority LOW 34
Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable an escalation of privi…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00359 · Published 2021-02-17 · Partial fix CWE-190
Priority LOW 34
In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00278 · Published 2020-12-14 · Fixed CWE-416
Priority LOW 22
A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to cause a denial of ser…
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.0044 · Published 2020-05-04 · Partial fix CWE-362