Lucene search

K
mageiaGentoo FoundationMGASA-2021-0460
HistoryOct 04, 2021 - 7:42 p.m.

Updated kernel-linus packages fix security vulnerabilities

2021-10-0419:42:18
Gentoo Foundation
advisories.mageia.org
31

0.0004 Low

EPSS

Percentile

13.7%

This kernel-linus update is based on upstream 5.10.70 and fixes at least the following security issues: Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccps_hc_tx_ccid object as a listener after being released (CVE-2020-16119). A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13 (CVE-2021-40490). oop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc//maps for exploitation (CVE-2021-41073). For other upstream fixes, see the referenced changelogs.

OSVersionArchitecturePackageVersionFilename
Mageia8noarchkernel-linus< 5.10.70-1kernel-linus-5.10.70-1.mga8