RHSA-2021:1578 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 43

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos	bpftool	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	bpftool-debuginfo	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-abi-stablelists	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-core	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-core	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-debuginfo	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-devel	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-modules	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-modules-extra	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-aarch64	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-ppc64le	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-s390x	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-x86_64	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-devel	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-doc	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-modules	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-modules-extra	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-tools	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-tools-debuginfo	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-tools-libs	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-core	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-debuginfo	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-devel	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-modules	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-modules-extra	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	perf	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	perf-debuginfo	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	python3-perf	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	python3-perf-debuginfo	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	bpftool-debuginfo	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debug-debuginfo	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo-common-aarch64	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo-common-ppc64le	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo-common-x86_64	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-tools-debuginfo	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-tools-libs-devel	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	perf-debuginfo	0:4.18.0-305.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	python3-perf-debuginfo	0:4.18.0-305.el8

Vulnerabilities 31

High 7.5

CVE-2023-1390

A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_lin…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Mar 16, 2023
Medium 6.7

CVE-2020-36694

An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet proce…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 21, 2023
Medium 5.5

CVE-2020-14314

A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the wa…

Linux kernel kernel linux-raspi2 linux-hwe Debian Ubuntu

Sep 15, 2020
Unscored —

CVE-2019-18811

A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 al…

linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu

Nov 7, 2019
Unscored —

CVE-2019-19523

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the dri…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 3, 2019
Unscored —

CVE-2019-19528

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the dri…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 3, 2019
Unscored —

CVE-2020-0431

In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to…

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Sep 17, 2020
Unscored —

CVE-2020-11608

An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferen…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 7, 2020
Unscored —

CVE-2020-12114

A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x be…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 4, 2020
Unscored —

CVE-2020-12362

Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and bef…

linux-raspi2 linux-hwe linux-azure linux-riscv Windows Debian Ubuntu

Feb 17, 2021
Unscored —

CVE-2020-12363

Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before Linux…

linux-raspi2 linux-hwe linux-azure linux-riscv Windows Debian Ubuntu

Feb 17, 2021
Unscored —

CVE-2020-12364

Null pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before version …

linux-raspi2 linux-hwe linux-azure linux-riscv Windows Debian Ubuntu

Feb 17, 2021
Unscored —

CVE-2020-12464

usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer oc…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 29, 2020
Unscored —

CVE-2020-14356 Public exploit

A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way w…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 19, 2020
Unscored —

CVE-2020-15437

The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Nov 23, 2020
Unscored —

CVE-2020-24394

In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem obj…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 19, 2020
Unscored —

CVE-2020-25212

A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt m…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 9, 2020
Unscored —

CVE-2020-25284

The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checkin…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 13, 2020
Unscored —

CVE-2020-25285

A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by loca…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 13, 2020
Unscored —

CVE-2020-25643

A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read ov…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Oct 6, 2020
Unscored —

CVE-2020-25645

A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypte…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Oct 13, 2020
Unscored —

CVE-2020-25704

A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SE…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 2, 2020
Unscored —

CVE-2020-27786 Public exploit

A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissio…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 11, 2020
Unscored —

CVE-2020-27835

A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user cal…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jan 7, 2021
Unscored —

CVE-2020-28974

A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 20, 2020
Unscored —

CVE-2020-35508

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 26, 2021
Unscored —

CVE-2020-36322

An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 14, 2021
Unscored —

CVE-2020-36557

A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could le…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jul 21, 2022
Unscored —

CVE-2021-0342

In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalat…

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Jan 11, 2021
Unscored —

CVE-2021-0605

In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to loc…

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Jun 22, 2021
Unscored —

CVE-2021-3428

A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a cra…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 4, 2022

References

article
https://access.redhat.com/security/updates/classification/#important
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/
report
https://bugzilla.redhat.com/show_bug.cgi?id=1777455
report
https://bugzilla.redhat.com/show_bug.cgi?id=1783434
report
https://bugzilla.redhat.com/show_bug.cgi?id=1783507
report
https://bugzilla.redhat.com/show_bug.cgi?id=1831726
report
https://bugzilla.redhat.com/show_bug.cgi?id=1833445
report
https://bugzilla.redhat.com/show_bug.cgi?id=1848084
report
https://bugzilla.redhat.com/show_bug.cgi?id=1848652
report
https://bugzilla.redhat.com/show_bug.cgi?id=1853922
report
https://bugzilla.redhat.com/show_bug.cgi?id=1859244
report
https://bugzilla.redhat.com/show_bug.cgi?id=1860479
report
https://bugzilla.redhat.com/show_bug.cgi?id=1868453
report
https://bugzilla.redhat.com/show_bug.cgi?id=1869141
report
https://bugzilla.redhat.com/show_bug.cgi?id=1873759
report
https://bugzilla.redhat.com/show_bug.cgi?id=1876840
report
https://bugzilla.redhat.com/show_bug.cgi?id=1877575
report
https://bugzilla.redhat.com/show_bug.cgi?id=1879981
report
https://bugzilla.redhat.com/show_bug.cgi?id=1882591
report
https://bugzilla.redhat.com/show_bug.cgi?id=1882594
report
https://bugzilla.redhat.com/show_bug.cgi?id=1890373
report
https://bugzilla.redhat.com/show_bug.cgi?id=1895961
report
https://bugzilla.redhat.com/show_bug.cgi?id=1900933
report
https://bugzilla.redhat.com/show_bug.cgi?id=1901161
report
https://bugzilla.redhat.com/show_bug.cgi?id=1901709
report
https://bugzilla.redhat.com/show_bug.cgi?id=1902724
report
https://bugzilla.redhat.com/show_bug.cgi?id=1903126
report
https://bugzilla.redhat.com/show_bug.cgi?id=1903387
report
https://bugzilla.redhat.com/show_bug.cgi?id=1903983
report
https://bugzilla.redhat.com/show_bug.cgi?id=1911343
report
https://bugzilla.redhat.com/show_bug.cgi?id=1915799
report
https://bugzilla.redhat.com/show_bug.cgi?id=1919889
report
https://bugzilla.redhat.com/show_bug.cgi?id=1930246
report
https://bugzilla.redhat.com/show_bug.cgi?id=1949560
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1578.json
report
https://access.redhat.com/security/cve/CVE-2019-18811
advisory
https://www.cve.org/CVERecord?id=CVE-2019-18811
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-18811
report
https://access.redhat.com/security/cve/CVE-2019-19523

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 43

Vulnerabilities 31

A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_lin…

An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet proce…

A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the wa…

A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 al…

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the dri…

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the dri…

In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to…

An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferen…

A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x be…

Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and bef…

Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before Linux…

Null pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before version …

usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer oc…

A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way w…

The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:…

In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem obj…

A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt m…

The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checkin…

A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by loca…

A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read ov…

A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypte…

A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SE…

A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissio…

A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user cal…

A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged…

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child…

An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. …

A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could le…

In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalat…

In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to loc…

A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a cra…

References