Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 59

Vulnerabilities 6

• High 8.7
  CVE-2021-22543

  Improper memory handling in Linux KVM

  An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to …

  Linux kernel Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 26, 2021
• Unscored —
  CVE-2019-20934

  An issue was discovered in the Linux kernel before 5.2.6. On NUMA systems, the Linux fair scheduler has a use-after-fre…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 28, 2020
• Unscored —
  CVE-2020-36385

  An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because th…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jun 7, 2021
• Unscored —
  CVE-2021-3653

  A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VM…

  linux-hwe linux-azure linux-gcp linux Debian Ubuntu Azure Linux
  Sep 29, 2021
• Unscored —
  CVE-2021-3656 Public exploit

  A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VM…

  linux-hwe linux-azure linux-gcp linux Virtualization Debian Ubuntu
  Mar 4, 2022
• Unscored —
  CVE-2021-37576

  arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to …

  linux-hwe linux linux-hwe-edge linux-realtime Debian Ubuntu Azure Linux
  Jul 26, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1902788
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1965461
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1974319
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1983686
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1983988
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1986506
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3987.json
• report
  https://access.redhat.com/security/cve/CVE-2019-20934
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-20934
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-20934
• report
  https://access.redhat.com/security/cve/CVE-2020-36385
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-36385
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-36385
• report
  https://access.redhat.com/security/cve/CVE-2021-3653
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3653
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3653
• article
  https://www.openwall.com/lists/oss-security/2021/08/16/1
• report
  https://access.redhat.com/security/cve/CVE-2021-3656
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3656
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3656
• report
  https://access.redhat.com/security/cve/CVE-2021-22543
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-22543
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-22543
• article
  https://github.com/google/security-research/security/advisories/GHSA-7wq5-phmq-m584
• report
  https://access.redhat.com/security/cve/CVE-2021-37576
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-37576
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-37576
• article
  https://www.openwall.com/lists/oss-security/2021/07/26/1