(RHSA-2021:1531) Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: Local buffer overflow in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c (CVE-2020-25211)

• kernel: SCSI target (LIO) write to any block on ILO backstore (CVE-2020-28374)

• kernel: out-of-bounds read in libiscsi module (CVE-2021-27364)

• kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365)

• kernel: malicious USB devices can lead to multiple out-of-bounds write (CVE-2019-19532)

• kernel: ICMP rate limiting can be used for DNS poisoning attack (CVE-2020-25705)

• kernel: iscsi: unrestricted access to sessions and handles (CVE-2021-27363)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

• memcg: mem_cgroup_idr can be updated in an uncoordinated manner which can lead to corruption (BZ#1931899)

• [infiniband] Backport Request to fix Multicast Sendonly joins (BZ#1937819)

• [Azure][RHEL-7]Mellanox Patches To Prevent Kernel Hang In MLX4 (BZ#1939791)