Red Hat Security Advisory

RHSA-2021:3173

kernel security update

Released 2021-08-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v. 8.1) kernel-tools-libs-devel-4.18.0-147.52.1.el8_1
Red Hat Enterprise Linux BaseOS EUS (v. 8.1) bpftool-4.18.0-147.52.1.el8_1, kernel-4.18.0-147.52.1.el8_1, kernel-abi-whitelists-4.18.0-147.52.1.el8_1 +19

Fixes 3 records

TI-2021-05514 CVE-2021-22555

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

CRITICAL 95KEV

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c.

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.78684 Published 2021-07-07 Partial fix CWE-787

TI-2021-05506 CVE-2021-22543

Improper memory handling in Linux KVM

LOW 39

An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest.

CVSS 4.0HIGH 8.7 Local Low privileges No interaction EPSS 0.0066 Published 2021-05-26 Partial fix CWE-119

TI-2021-12115 CVE-2021-32399 · GHSA-xw4j-8m9c-4vwq

net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.

LOW 32

net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00691 Published 2021-05-10 Fixed CWE-362