Red Hat Security Advisory

RHSA-2021:3327

kernel security and bug fix update

Released 2021-08-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1160.41.1.el7, kernel-3.10.0-1160.41.1.el7, kernel-abi-whitelists-3.10.0-1160.41.1.el7 +8
Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.41.1.el7
Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.41.1.el7
Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1160.41.1.el7, kernel-3.10.0-1160.41.1.el7, kernel-abi-whitelists-3.10.0-1160.41.1.el7 +11
Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1160.41.1.el7, kernel-tools-libs-devel-3.10.0-1160.41.1.el7
Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1160.41.1.el7, kernel-3.10.0-1160.41.1.el7, kernel-abi-whitelists-3.10.0-1160.41.1.el7 +8
Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.41.1.el7

Fixes 5 records

TI-2021-05514 CVE-2021-22555

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

CRITICAL 95KEV

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c.

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.78684 Published 2021-07-07 Partial fix CWE-787

TI-2021-10024 CVE-2021-29154 · GHSA-q7mp-r58x-5fjf

BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of…

LOW 36

BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00931 Published 2021-04-08 Partial fix CWE-77

TI-2021-12115 CVE-2021-32399 · GHSA-xw4j-8m9c-4vwq

net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.

LOW 32

net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00691 Published 2021-05-10 Fixed CWE-362

TI-2020-16862 CVE-2020-27777 · GHSA-w5hm-w8cx-wrwr

Missing authorization in kernel

LOW 30

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00476 Published 2020-12-15 Partial fix CWE-862

TI-2021-10350 CVE-2021-29650 · GHSA-pwg2-cp6r-fqq7

An issue was discovered in the Linux kernel before 5.11.11.

LOW 25

An issue was discovered in the Linux kernel before 5.11.11.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00413 Published 2021-03-30 Partial fix