(RHSA-2021:0019) Moderate: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c leads to use-after-free (CVE-2018-20836)

• kernel: use-after-free in drivers/bluetooth/hci_ldisc.c (CVE-2019-15917)

• kernel: out-of-bounds write via crafted keycode table (CVE-2019-20636)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

• RHEL7 - [ Brazos ] “Core(s) per socket” and “Socket” values are interchanged in lscpu output. (kernel) (BZ#1879096)

• [DELL EMC 7.9 BUG] System crash when stressed using burnin stress tool (BZ#1893994)

• [ Marvell 7.9] update qla2xxx driver with critical bug fixes (BZ#1895440)