RHSA-2021:0857 — Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 17

Release	Package	Fixed in
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debug	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debug-debuginfo	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debug-devel	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debug-kvm	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debug-kvm-debuginfo	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debuginfo	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-debuginfo-common-x86_64	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-devel	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-doc	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-kvm	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-kvm-debuginfo	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-trace	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-trace-debuginfo	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-trace-devel	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-trace-kvm	0:3.10.0-1160.21.1.rt56.1158.el7
Red Hat · RHEL 7 rhel_extras_rt:7	kernel-rt-trace-kvm-debuginfo	0:3.10.0-1160.21.1.rt56.1158.el7

Vulnerabilities 11

Unscored —

CVE-2019-19532

In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB dev…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 3, 2019
Unscored —

CVE-2020-0427

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local i…

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Sep 17, 2020
Unscored —

CVE-2020-14351

A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local att…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 3, 2020
Unscored —

CVE-2020-25211

In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a loca…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 9, 2020
Unscored —

CVE-2020-25645

A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypte…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Oct 13, 2020
Unscored —

CVE-2020-25656

A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGK…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 2, 2020
Unscored —

CVE-2020-25705 Public exploit

A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an of…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 17, 2020
Unscored —

CVE-2020-28374

In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SC…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jan 13, 2021
Unscored —

CVE-2020-29661 Public exploit

A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allow…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 9, 2020
Unscored —

CVE-2020-7053

In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a u…

linux-hwe linux-azure linux-riscv linux-gcp Debian Ubuntu

Jan 14, 2020
Unscored —

CVE-2021-20265

A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 10, 2021

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=1781821
report
https://bugzilla.redhat.com/show_bug.cgi?id=1795624
report
https://bugzilla.redhat.com/show_bug.cgi?id=1862849
report
https://bugzilla.redhat.com/show_bug.cgi?id=1877571
report
https://bugzilla.redhat.com/show_bug.cgi?id=1883988
report
https://bugzilla.redhat.com/show_bug.cgi?id=1888726
report
https://bugzilla.redhat.com/show_bug.cgi?id=1894579
report
https://bugzilla.redhat.com/show_bug.cgi?id=1899804
report
https://bugzilla.redhat.com/show_bug.cgi?id=1906525
report
https://bugzilla.redhat.com/show_bug.cgi?id=1908827
report
https://bugzilla.redhat.com/show_bug.cgi?id=1919893
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0857.json
report
https://access.redhat.com/security/cve/CVE-2019-19532
advisory
https://www.cve.org/CVERecord?id=CVE-2019-19532
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-19532
report
https://access.redhat.com/security/cve/CVE-2020-0427
advisory
https://www.cve.org/CVERecord?id=CVE-2020-0427
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-0427
report
https://access.redhat.com/security/cve/CVE-2020-7053
advisory
https://www.cve.org/CVERecord?id=CVE-2020-7053
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-7053
report
https://access.redhat.com/security/cve/CVE-2020-14351
advisory
https://www.cve.org/CVERecord?id=CVE-2020-14351
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-14351
report
https://access.redhat.com/security/cve/CVE-2020-25211
advisory
https://www.cve.org/CVERecord?id=CVE-2020-25211
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-25211
article
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1cc5ef91d2ff94d2bf2de3b3585423e8a1051cb6
report
https://access.redhat.com/security/cve/CVE-2020-25645
advisory
https://www.cve.org/CVERecord?id=CVE-2020-25645
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-25645
report
https://access.redhat.com/security/cve/CVE-2020-25656
advisory
https://www.cve.org/CVERecord?id=CVE-2020-25656
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-25656
article
https://lkml.org/lkml/2020/10/16/84
article
https://lkml.org/lkml/2020/10/29/528
report
https://access.redhat.com/security/cve/CVE-2020-25705
advisory
https://www.cve.org/CVERecord?id=CVE-2020-25705

Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 17

Vulnerabilities 11

In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB dev…

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local i…

A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local att…

In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a loca…

A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypte…

A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGK…

A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an of…

In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SC…

A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allow…

In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a u…

A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a …

References