Priority CRITICAL 95KEV
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c.
RHSA-2021:3812
kernel security update
Released 2021-10-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.6) bpftool-3.10.0-957.84.1.el7, kernel-3.10.0-957.84.1.el7, kernel-abi-whitelists-3.10.0-957.84.1.el7 +8
- Red Hat Enterprise Linux Server E4S (v. 7.6) kernel-3.10.0-957.84.1.el7, kernel-abi-whitelists-3.10.0-957.84.1.el7, kernel-bootwrapper-3.10.0-957.84.1.el7 +8
- Red Hat Enterprise Linux Server Optional AUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.84.1.el7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.6) kernel-debug-devel-3.10.0-957.84.1.el7, kernel-tools-libs-devel-3.10.0-957.84.1.el7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.84.1.el7
- Red Hat Enterprise Linux Server TUS (v. 7.6) bpftool-3.10.0-957.84.1.el7, kernel-3.10.0-957.84.1.el7, kernel-abi-whitelists-3.10.0-957.84.1.el7 +8
Fixes 5 records
TI-2021-05506 CVE-2021-22543
Improper memory handling in Linux KVM
Priority LOW 39
An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest.
TI-2021-02598 CVE-2021-3656
Missing authorization in KVM
Priority LOW 39
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization.
TI-2021-02595 CVE-2021-3653 · GHSA-g58x-c6rr-7fp2
Missing authorization in kernel
Priority LOW 38
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization.
TI-2021-15463 CVE-2021-37576 · GHSA-w5r9-h86g-qp9x
arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform…
Priority LOW 35
arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.