Red Hat Security Advisory

RHSA-2021:3522

kernel security and bug fix update

Released 2021-09-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.7) bpftool-3.10.0-1062.56.1.el7, kernel-3.10.0-1062.56.1.el7, kernel-abi-whitelists-3.10.0-1062.56.1.el7 +8
Red Hat Enterprise Linux Server E4S (v. 7.7) bpftool-3.10.0-1062.56.1.el7, kernel-3.10.0-1062.56.1.el7, kernel-abi-whitelists-3.10.0-1062.56.1.el7 +9
Red Hat Enterprise Linux Server Optional AUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.56.1.el7
Red Hat Enterprise Linux Server Optional E4S (v. 7.7) kernel-debug-devel-3.10.0-1062.56.1.el7, kernel-tools-libs-devel-3.10.0-1062.56.1.el7
Red Hat Enterprise Linux Server Optional TUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.56.1.el7
Red Hat Enterprise Linux Server TUS (v. 7.7) bpftool-3.10.0-1062.56.1.el7, kernel-3.10.0-1062.56.1.el7, kernel-abi-whitelists-3.10.0-1062.56.1.el7 +8

TI-2021-05514 CVE-2021-22555

CRITICAL 95KEV

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c.

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.78684 Published 2021-07-07 Partial fix CWE-787

TI-2021-02345 CVE-2021-3347 · GHSA-8r42-h5pm-2vw2

HIGH 69

An issue was discovered in the Linux kernel through 5.10.11.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01365 Published 2021-01-29 Fixed CWE-416

TI-2021-12115 CVE-2021-32399 · GHSA-xw4j-8m9c-4vwq

LOW 32

net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00691 Published 2021-05-10 Fixed CWE-362

TI-2020-06932 CVE-2020-8648 · GHSA-9hr4-45xh-6xvh

LOW 32

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00661 Published 2020-02-06 Partial fix CWE-416