Red Hat Security AdvisoryRHSA-2021:2719
kernel-rt security and bug fix update
Released 2021-07-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Real Time EUS (v. 8.2) kernel-rt-4.18.0-193.60.2.rt13.112.el8_2, kernel-rt-core-4.18.0-193.60.2.rt13.112.el8_2, kernel-rt-debug-4.18.0-193.60.2.rt13.112.el8_2 +7
- Red Hat Enterprise Linux Real Time for NFV EUS (v. 8.2) kernel-rt-4.18.0-193.60.2.rt13.112.el8_2, kernel-rt-core-4.18.0-193.60.2.rt13.112.el8_2, kernel-rt-debug-4.18.0-193.60.2.rt13.112.el8_2 +9
Fixes 5 records
Priority MEDIUM 46
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged use…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.09808 · Published 2021-07-20 · Partial fix CWE-190
Priority LOW 36
In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00826 · Published 2021-05-14 · Fixed CWE-416
Priority LOW 29
The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism.
CVSS 3.1MEDIUM 6.5· Local · High privileges · User interaction · EPSS 0.00528 · Published 2020-10-02 · Partial fix
Priority LOW 25
A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00353 · Published 2020-12-02 · Partial fix CWE-401
Priority LOW 20
A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers.
CVSS 3.1MEDIUM 4.5· Local · Low privileges · No interaction · EPSS 0.00225 · Published 2021-03-26 · Fixed CWE-665
THREATIST.IORead the docs