Red Hat Security AdvisoryRHSA-2021:2355
kernel security and bug fix update
Released 2021-06-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.6) bpftool-3.10.0-957.76.1.el7, kernel-3.10.0-957.76.1.el7, kernel-abi-whitelists-3.10.0-957.76.1.el7 +8
- Red Hat Enterprise Linux Server E4S (v. 7.6) bpftool-3.10.0-957.76.1.el7, kernel-3.10.0-957.76.1.el7, kernel-abi-whitelists-3.10.0-957.76.1.el7 +10
- Red Hat Enterprise Linux Server Optional AUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.76.1.el7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.6) kernel-debug-devel-3.10.0-957.76.1.el7, kernel-tools-libs-devel-3.10.0-957.76.1.el7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.76.1.el7
- Red Hat Enterprise Linux Server TUS (v. 7.6) bpftool-3.10.0-957.76.1.el7, kernel-3.10.0-957.76.1.el7, kernel-abi-whitelists-3.10.0-957.76.1.el7 +8
Fixes 4 records
Priority MEDIUM 42
A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.06692 · Published 2020-11-17 · Partial fix CWE-330
Priority LOW 34
Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable an escalation of privi…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00359 · Published 2021-02-17 · Partial fix CWE-190
Priority LOW 31
In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00504 · Published 2019-12-03 · Partial fix CWE-787
Priority LOW 28
In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_fi…
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00566 · Published 2020-09-09 · Partial fix CWE-120
THREATIST.IORead the docs