Red Hat Security AdvisoryRHSA-2021:2718
kernel security and bug fix update
Released 2021-07-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v. 8.2) kernel-tools-libs-devel-4.18.0-193.60.2.el8_2
- Red Hat Enterprise Linux BaseOS EUS (v. 8.2) bpftool-4.18.0-193.60.2.el8_2, kernel-4.18.0-193.60.2.el8_2, kernel-abi-whitelists-4.18.0-193.60.2.el8_2 +19
Fixes 5 records
Priority MEDIUM 46
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged use…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.09808 · Published 2021-07-20 · Partial fix CWE-190
Priority LOW 36
In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00826 · Published 2021-05-14 · Fixed CWE-416
Priority LOW 29
The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism.
CVSS 3.1MEDIUM 6.5· Local · High privileges · User interaction · EPSS 0.00528 · Published 2020-10-02 · Partial fix
Priority LOW 25
A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00353 · Published 2020-12-02 · Partial fix CWE-401
Priority LOW 20
A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers.
CVSS 3.1MEDIUM 4.5· Local · Low privileges · No interaction · EPSS 0.00225 · Published 2021-03-26 · Fixed CWE-665