Red Hat Security Advisory

RHSA-2021:3801

kernel security and bug fix update

Released 2021-10-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1160.45.1.el7, kernel-3.10.0-1160.45.1.el7, kernel-abi-whitelists-3.10.0-1160.45.1.el7 +8
Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.45.1.el7
Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.45.1.el7
Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1160.45.1.el7, kernel-3.10.0-1160.45.1.el7, kernel-abi-whitelists-3.10.0-1160.45.1.el7 +11
Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1160.45.1.el7, kernel-tools-libs-devel-3.10.0-1160.45.1.el7
Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1160.45.1.el7, kernel-3.10.0-1160.45.1.el7, kernel-abi-whitelists-3.10.0-1160.45.1.el7 +8
Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.45.1.el7

Fixes 4 records

TI-2021-05506 CVE-2021-22543

Improper memory handling in Linux KVM

LOW 39

An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest.

CVSS 4.0HIGH 8.7 Local Low privileges No interaction EPSS 0.0066 Published 2021-05-26 Partial fix CWE-119

TI-2021-02598 CVE-2021-3656

Missing authorization in KVM

LOW 39

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00658 Published 2022-03-04 Partial fix CWE-862

TI-2021-02595 CVE-2021-3653 · GHSA-g58x-c6rr-7fp2

Missing authorization in kernel

LOW 38

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00448 Published 2021-09-29 Partial fix CWE-862

TI-2021-15463 CVE-2021-37576 · GHSA-w5r9-h86g-qp9x

arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform…

LOW 35

arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00575 Published 2021-07-26 Partial fix CWE-787