Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Vulnerabilities 8

• High 7.8
  CVE-2021-3347 Public exploit

  An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 29, 2021
• Unscored —
  CVE-2020-0466

  In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This co…

  linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
  Dec 14, 2020
• Unscored —
  CVE-2020-27152

  An issue was discovered in ioapic_lazy_update_eoi in arch/x86/kvm/ioapic.c in the Linux kernel before 5.9.2. It has an …

  linux-raspi2 linux-hwe linux-azure linux-gcp Debian Ubuntu
  Nov 6, 2020
• Unscored —
  CVE-2020-28374

  In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SC…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 13, 2021
• Unscored —
  CVE-2021-26708 Public exploit

  A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOC…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Feb 5, 2021
• Unscored —
  CVE-2021-27363

  An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 7, 2021
• Unscored —
  CVE-2021-27364

  An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected b…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 7, 2021
• Unscored —
  CVE-2021-27365 Public exploit

  An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate lengt…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 7, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1888886
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1899804
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1920480
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1922249
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1925588
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1926369
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1930078
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1930079
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1930080
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1081.json
• report
  https://access.redhat.com/security/cve/CVE-2020-0466
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-0466
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-0466
• report
  https://access.redhat.com/security/cve/CVE-2020-27152
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-27152
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-27152
• article
  https://bugzilla.kernel.org/show_bug.cgi?id=208767
• article
  https://git.kernel.org/linus/77377064c3a94911339f13ce113b3abf265e06da
• article
  https://www.openwall.com/lists/oss-security/2020/11/03/1
• report
  https://access.redhat.com/security/cve/CVE-2020-28374
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-28374
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-28374
• report
  https://access.redhat.com/security/cve/CVE-2021-3347
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3347
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3347
• report
  https://access.redhat.com/security/cve/CVE-2021-26708
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-26708
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-26708
• article
  https://www.openwall.com/lists/oss-security/2021/02/04/5
• report
  https://access.redhat.com/security/cve/CVE-2021-27363
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-27363
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-27363
• article
  https://www.openwall.com/lists/oss-security/2021/03/06/1
• report
  https://access.redhat.com/security/cve/CVE-2021-27364
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-27364
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-27364
• report
  https://access.redhat.com/security/cve/CVE-2021-27365
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-27365