Red Hat Security AdvisoryRHSA-2021:2570
kernel security and bug fix update
Released 2021-06-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-305.7.1.el8_4
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-305.7.1.el8_4, kernel-4.18.0-305.7.1.el8_4, kernel-abi-stablelists-4.18.0-305.7.1.el8_4 +19
Fixes 2 records
Priority LOW 36
In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00826 · Published 2021-05-14 · Fixed CWE-416
Priority LOW 29
The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism.
CVSS 3.1MEDIUM 6.5· Local · High privileges · User interaction · EPSS 0.00528 · Published 2020-10-02 · Partial fix