RHSA-2021:1739 — Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-core	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-core	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-debuginfo	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-devel	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-kvm	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-modules	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-modules-extra	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debuginfo	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debuginfo-common-x86_64	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-devel	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-kvm	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-modules	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-modules-extra	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-core	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug-core	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug-debuginfo	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug-devel	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug-modules	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug-modules-extra	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debuginfo	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debuginfo-common-x86_64	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-devel	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-modules	0:4.18.0-305.rt7.72.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-modules-extra	0:4.18.0-305.rt7.72.el8

Vulnerabilities 27

High 7.5

CVE-2023-1390

A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_lin…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Mar 16, 2023
Medium 6.7

CVE-2020-36694

An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet proce…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 21, 2023
Medium 5.5

CVE-2020-14314

A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the wa…

Linux kernel kernel linux-raspi2 linux-hwe Debian Ubuntu

Sep 15, 2020
Unscored —

CVE-2019-19523

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the dri…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 3, 2019
Unscored —

CVE-2019-19528

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the dri…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 3, 2019
Unscored —

CVE-2020-0431

In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to…

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Sep 17, 2020
Unscored —

CVE-2020-11608

An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferen…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 7, 2020
Unscored —

CVE-2020-12114

A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x be…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 4, 2020
Unscored —

CVE-2020-12362

Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and bef…

linux-raspi2 linux-hwe linux-azure linux-riscv Windows Debian Ubuntu

Feb 17, 2021
Unscored —

CVE-2020-12363

Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before Linux…

linux-raspi2 linux-hwe linux-azure linux-riscv Windows Debian Ubuntu

Feb 17, 2021
Unscored —

CVE-2020-12364

Null pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before version …

linux-raspi2 linux-hwe linux-azure linux-riscv Windows Debian Ubuntu

Feb 17, 2021
Unscored —

CVE-2020-12464

usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer oc…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 29, 2020
Unscored —

CVE-2020-14356 Public exploit

A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way w…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 19, 2020
Unscored —

CVE-2020-15437

The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Nov 23, 2020
Unscored —

CVE-2020-24394

In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem obj…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 19, 2020
Unscored —

CVE-2020-25212

A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt m…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 9, 2020
Unscored —

CVE-2020-25284

The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checkin…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 13, 2020
Unscored —

CVE-2020-25285

A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by loca…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 13, 2020
Unscored —

CVE-2020-25643

A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read ov…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Oct 6, 2020
Unscored —

CVE-2020-25704

A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SE…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 2, 2020
Unscored —

CVE-2020-27786 Public exploit

A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissio…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 11, 2020
Unscored —

CVE-2020-27835

A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user cal…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jan 7, 2021
Unscored —

CVE-2020-28974

A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 20, 2020
Unscored —

CVE-2020-35508

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 26, 2021
Unscored —

CVE-2021-0342

In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalat…

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Jan 11, 2021
Unscored —

CVE-2021-0605

In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to loc…

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Jun 22, 2021
Unscored —

CVE-2021-3428

A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a cra…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 4, 2022

References

article
https://access.redhat.com/security/updates/classification/#important
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/
report
https://bugzilla.redhat.com/show_bug.cgi?id=1783434
report
https://bugzilla.redhat.com/show_bug.cgi?id=1783507
report
https://bugzilla.redhat.com/show_bug.cgi?id=1831726
report
https://bugzilla.redhat.com/show_bug.cgi?id=1833445
report
https://bugzilla.redhat.com/show_bug.cgi?id=1848652
report
https://bugzilla.redhat.com/show_bug.cgi?id=1853922
report
https://bugzilla.redhat.com/show_bug.cgi?id=1868453
report
https://bugzilla.redhat.com/show_bug.cgi?id=1869141
report
https://bugzilla.redhat.com/show_bug.cgi?id=1877575
report
https://bugzilla.redhat.com/show_bug.cgi?id=1879981
report
https://bugzilla.redhat.com/show_bug.cgi?id=1882591
report
https://bugzilla.redhat.com/show_bug.cgi?id=1882594
report
https://bugzilla.redhat.com/show_bug.cgi?id=1886109
report
https://bugzilla.redhat.com/show_bug.cgi?id=1894793
report
https://bugzilla.redhat.com/show_bug.cgi?id=1895961
report
https://bugzilla.redhat.com/show_bug.cgi?id=1896842
report
https://bugzilla.redhat.com/show_bug.cgi?id=1897869
report
https://bugzilla.redhat.com/show_bug.cgi?id=1900933
report
https://bugzilla.redhat.com/show_bug.cgi?id=1901161
report
https://bugzilla.redhat.com/show_bug.cgi?id=1901709
report
https://bugzilla.redhat.com/show_bug.cgi?id=1902724
report
https://bugzilla.redhat.com/show_bug.cgi?id=1903126
report
https://bugzilla.redhat.com/show_bug.cgi?id=1915799
report
https://bugzilla.redhat.com/show_bug.cgi?id=1919889
report
https://bugzilla.redhat.com/show_bug.cgi?id=1930246
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1739.json
report
https://access.redhat.com/security/cve/CVE-2019-19523
advisory
https://www.cve.org/CVERecord?id=CVE-2019-19523
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-19523
report
https://access.redhat.com/security/cve/CVE-2019-19528
advisory
https://www.cve.org/CVERecord?id=CVE-2019-19528
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-19528
report
https://access.redhat.com/security/cve/CVE-2020-0431
advisory
https://www.cve.org/CVERecord?id=CVE-2020-0431
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-0431
article
https://patchwork.kernel.org/project/linux-input/patch/20191207210518.GA181006@dtor-ws/
report
https://access.redhat.com/security/cve/CVE-2020-11608

Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Vulnerabilities 27

A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_lin…

An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet proce…

A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the wa…

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the dri…

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the dri…

In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to…

An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferen…

A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x be…

Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and bef…

Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before Linux…

Null pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before version …

usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer oc…

A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way w…

The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:…

In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem obj…

A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt m…

The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checkin…

A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by loca…

A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read ov…

A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SE…

A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissio…

A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user cal…

A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged…

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child…

In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalat…

In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to loc…

A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a cra…

References