RHSA-2021:1093 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 43

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos	bpftool	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	bpftool-debuginfo	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-abi-whitelists	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-core	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-core	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-debuginfo	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-devel	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-modules	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-modules-extra	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-aarch64	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-ppc64le	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-s390x	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-x86_64	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-devel	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-doc	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-modules	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-modules-extra	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-tools	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-tools-debuginfo	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-tools-libs	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-core	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-debuginfo	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-devel	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-modules	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-modules-extra	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	perf	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	perf-debuginfo	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	python3-perf	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::baseos	python3-perf-debuginfo	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::crb	bpftool-debuginfo	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debug-debuginfo	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo-common-aarch64	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo-common-ppc64le	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo-common-x86_64	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-tools-debuginfo	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-tools-libs-devel	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::crb	perf-debuginfo	0:4.18.0-240.22.1.el8_3
Red Hat · RHEL 8 enterprise_linux:8::crb	python3-perf-debuginfo	0:4.18.0-240.22.1.el8_3

Vulnerabilities 8

High 7.8

CVE-2021-3347 Public exploit

An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jan 29, 2021
Unscored —

CVE-2020-0466

In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This co…

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Dec 14, 2020
Unscored —

CVE-2020-27152

An issue was discovered in ioapic_lazy_update_eoi in arch/x86/kvm/ioapic.c in the Linux kernel before 5.9.2. It has an …

linux-raspi2 linux-hwe linux-azure linux-gcp Debian Ubuntu

Nov 6, 2020
Unscored —

CVE-2020-28374

In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SC…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jan 13, 2021
Unscored —

CVE-2021-26708 Public exploit

A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOC…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 5, 2021
Unscored —

CVE-2021-27363

An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 7, 2021
Unscored —

CVE-2021-27364

An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected b…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 7, 2021
Unscored —

CVE-2021-27365 Public exploit

An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate lengt…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 7, 2021

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=1888886
report
https://bugzilla.redhat.com/show_bug.cgi?id=1899804
report
https://bugzilla.redhat.com/show_bug.cgi?id=1920480
report
https://bugzilla.redhat.com/show_bug.cgi?id=1922249
report
https://bugzilla.redhat.com/show_bug.cgi?id=1925588
report
https://bugzilla.redhat.com/show_bug.cgi?id=1930078
report
https://bugzilla.redhat.com/show_bug.cgi?id=1930079
report
https://bugzilla.redhat.com/show_bug.cgi?id=1930080
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1093.json
report
https://access.redhat.com/security/cve/CVE-2020-0466
advisory
https://www.cve.org/CVERecord?id=CVE-2020-0466
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-0466
report
https://access.redhat.com/security/cve/CVE-2020-27152
advisory
https://www.cve.org/CVERecord?id=CVE-2020-27152
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-27152
article
https://bugzilla.kernel.org/show_bug.cgi?id=208767
article
https://git.kernel.org/linus/77377064c3a94911339f13ce113b3abf265e06da
article
https://www.openwall.com/lists/oss-security/2020/11/03/1
report
https://access.redhat.com/security/cve/CVE-2020-28374
advisory
https://www.cve.org/CVERecord?id=CVE-2020-28374
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-28374
report
https://access.redhat.com/security/cve/CVE-2021-3347
advisory
https://www.cve.org/CVERecord?id=CVE-2021-3347
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-3347
report
https://access.redhat.com/security/cve/CVE-2021-26708
advisory
https://www.cve.org/CVERecord?id=CVE-2021-26708
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-26708
article
https://www.openwall.com/lists/oss-security/2021/02/04/5
report
https://access.redhat.com/security/cve/CVE-2021-27363
advisory
https://www.cve.org/CVERecord?id=CVE-2021-27363
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-27363
article
https://www.openwall.com/lists/oss-security/2021/03/06/1
report
https://access.redhat.com/security/cve/CVE-2021-27364
advisory
https://www.cve.org/CVERecord?id=CVE-2021-27364
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-27364
report
https://access.redhat.com/security/cve/CVE-2021-27365
advisory
https://www.cve.org/CVERecord?id=CVE-2021-27365
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-27365

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 43

Vulnerabilities 8

An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault…

In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This co…

An issue was discovered in ioapic_lazy_update_eoi in arch/x86/kvm/ioapic.c in the Linux kernel before 5.9.2. It has an …

In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SC…

A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOC…

An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address …

An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected b…

An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate lengt…

References