Red Hat Security AdvisoryRHSA-2021:3987
kernel security and bug fix update
Released 2021-10-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.7) bpftool-3.10.0-1062.59.1.el7, kernel-3.10.0-1062.59.1.el7, kernel-abi-whitelists-3.10.0-1062.59.1.el7 +8
- Red Hat Enterprise Linux Server E4S (v. 7.7) bpftool-3.10.0-1062.59.1.el7, kernel-3.10.0-1062.59.1.el7, kernel-abi-whitelists-3.10.0-1062.59.1.el7 +9
- Red Hat Enterprise Linux Server Optional AUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.59.1.el7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.7) kernel-debug-devel-3.10.0-1062.59.1.el7, kernel-tools-libs-devel-3.10.0-1062.59.1.el7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.59.1.el7
- Red Hat Enterprise Linux Server TUS (v. 7.7) bpftool-3.10.0-1062.59.1.el7, kernel-3.10.0-1062.59.1.el7, kernel-abi-whitelists-3.10.0-1062.59.1.el7 +8
Fixes 6 records
Priority LOW 39
An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest.
CVSS 4.0HIGH 8.7· Local · Low privileges · No interaction · EPSS 0.0066 · Published 2021-05-26 · Partial fix CWE-119
Priority LOW 39
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00658 · Published 2022-03-04 · Partial fix CWE-862
Priority LOW 38
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00448 · Published 2021-09-29 · Partial fix CWE-862
Priority LOW 37
An issue was discovered in the Linux kernel before 5.10.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01476 · Published 2021-06-07 · Partial fix CWE-416
Priority LOW 35
arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00575 · Published 2021-07-26 · Partial fix CWE-787
Priority LOW 24
An issue was discovered in the Linux kernel before 5.2.6.
CVSS 3.1MEDIUM 5.3· Local · Low privileges · No interaction · EPSS 0.00317 · Published 2020-11-28 · Partial fix CWE-416
THREATIST.IORead the docs