Red Hat Security AdvisoryRHSA-2021:2732
kernel security update
Released 2021-07-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.4) kernel-3.10.0-693.90.2.el7, kernel-abi-whitelists-3.10.0-693.90.2.el7, kernel-debug-3.10.0-693.90.2.el7 +7
- Red Hat Enterprise Linux Server E4S (v. 7.4) kernel-3.10.0-693.90.2.el7, kernel-abi-whitelists-3.10.0-693.90.2.el7, kernel-bootwrapper-3.10.0-693.90.2.el7 +8
- Red Hat Enterprise Linux Server Optional AUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.90.2.el7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.4) kernel-debug-devel-3.10.0-693.90.2.el7, kernel-tools-libs-devel-3.10.0-693.90.2.el7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.90.2.el7
- Red Hat Enterprise Linux Server TUS (v. 7.4) kernel-3.10.0-693.90.2.el7, kernel-abi-whitelists-3.10.0-693.90.2.el7, kernel-debug-3.10.0-693.90.2.el7 +7
Fixes 4 records
Priority HIGH 69
An issue was discovered in the Linux kernel through 5.10.11.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01365 · Published 2021-01-29 · Fixed CWE-416
Priority MEDIUM 46
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged use…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.09808 · Published 2021-07-20 · Partial fix CWE-190
Priority MEDIUM 45
In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an X…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.06642 · Published 2021-01-13 · Partial fix CWE-22
Priority LOW 36
In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00826 · Published 2021-05-14 · Fixed CWE-416