Red Hat Security AdvisoryRHSA-2021:2725
kernel security and bug fix update
Released 2021-07-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1160.36.2.el7, kernel-3.10.0-1160.36.2.el7, kernel-abi-whitelists-3.10.0-1160.36.2.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.36.2.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.36.2.el7
- Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1160.36.2.el7, kernel-3.10.0-1160.36.2.el7, kernel-abi-whitelists-3.10.0-1160.36.2.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1160.36.2.el7, kernel-tools-libs-devel-3.10.0-1160.36.2.el7
- Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1160.36.2.el7, kernel-3.10.0-1160.36.2.el7, kernel-abi-whitelists-3.10.0-1160.36.2.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.36.2.el7
Fixes 5 records
Priority MEDIUM 46
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged use…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.09808 · Published 2021-07-20 · Partial fix CWE-190
Priority LOW 36
In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00826 · Published 2021-05-14 · Fixed CWE-416
Priority LOW 35
The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00571 · Published 2021-05-14 · Partial fix CWE-416
Priority LOW 32
In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a246b4d54770.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00483 · Published 2020-04-09 · Partial fix CWE-476
Priority LOW 24
An issue was discovered in the Linux kernel before 5.2.6.
CVSS 3.1MEDIUM 5.3· Local · Low privileges · No interaction · EPSS 0.00317 · Published 2020-11-28 · Partial fix CWE-416
THREATIST.IORead the docs