Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 45

Vulnerabilities 7

• Unscored —
  CVE-2019-19532

  In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB dev…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 3, 2019
• Unscored —
  CVE-2020-25211

  In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a loca…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 9, 2020
• Unscored —
  CVE-2020-25705 Public exploit

  A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an of…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 17, 2020
• Unscored —
  CVE-2020-28374

  In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SC…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 13, 2021
• Unscored —
  CVE-2021-27363

  An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 7, 2021
• Unscored —
  CVE-2021-27364

  An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected b…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 7, 2021
• Unscored —
  CVE-2021-27365 Public exploit

  An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate lengt…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 7, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1781821
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1877571
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1894579
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1899804
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1930078
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1930079
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1930080
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1531.json
• report
  https://access.redhat.com/security/cve/CVE-2019-19532
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19532
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19532
• report
  https://access.redhat.com/security/cve/CVE-2020-25211
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25211
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25211
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1cc5ef91d2ff94d2bf2de3b3585423e8a1051cb6
• report
  https://access.redhat.com/security/cve/CVE-2020-25705
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25705
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25705
• report
  https://access.redhat.com/security/cve/CVE-2020-28374
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-28374
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-28374
• report
  https://access.redhat.com/security/cve/CVE-2021-27363
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-27363
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-27363
• article
  https://www.openwall.com/lists/oss-security/2021/03/06/1
• report
  https://access.redhat.com/security/cve/CVE-2021-27364
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-27364
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-27364
• report
  https://access.redhat.com/security/cve/CVE-2021-27365
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-27365
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-27365