Red Hat Security AdvisoryRHSA-2021:2737
RHV-H security update (redhat-virtualization-host) 4.3.17
Released 2021-07-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL 7-based RHEV-H for RHEV 4 (build requirements) redhat-virtualization-host-4.3.17-20210713.0.el7_9, redhat-virtualization-host-image-update-4.3.17-20210713.0.el7_9
- Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.3.17-20210713.0.el7_9, redhat-virtualization-host-image-update-4.3.17-20210713.0.el7_9
Fixes 2 records
Priority MEDIUM 46
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged use…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.09808 · Published 2021-07-20 · Partial fix CWE-190
Priority LOW 36
In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00826 · Published 2021-05-14 · Fixed CWE-416
