Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2021:4650
HistoryNov 15, 2021 - 10:01 a.m.

(RHSA-2021:4650) Important: kernel security, bug fix, and enhancement update

2021-11-1510:01:01
access.redhat.com
19

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.044 Low

EPSS

Percentile

92.3%

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type (CVE-2021-43267)

  • kernel: timer tree corruption leads to missing wakeup and system freeze (CVE-2021-20317)

  • kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode (CVE-2021-28950)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Fix repeated xhci wake after suspend due to uncleared internal wake state (BZ#2003789)

  • CephFS mount points return “permission denied” (BZ#2017099)

Enhancement(s):

  • Update qla2xxx driver to latest upstream (BZ#2014150)
OSVersionArchitecturePackageVersionFilename
RedHat8s390xkernel-zfcpdump-modules< 4.18.0-305.28.1.el8_4kernel-zfcpdump-modules-4.18.0-305.28.1.el8_4.s390x.rpm
RedHat8aarch64kernel-debug< 4.18.0-305.28.1.el8_4kernel-debug-4.18.0-305.28.1.el8_4.aarch64.rpm
RedHat8ppc64lepython3-perf< 4.18.0-305.28.1.el8_4python3-perf-4.18.0-305.28.1.el8_4.ppc64le.rpm
RedHat8x86_64kernel-headers< 4.18.0-305.28.1.el8_4kernel-headers-4.18.0-305.28.1.el8_4.x86_64.rpm
RedHat8x86_64perf< 4.18.0-305.28.1.el8_4perf-4.18.0-305.28.1.el8_4.x86_64.rpm
RedHat8x86_64kernel-debug-modules-extra< 4.18.0-305.28.1.el8_4kernel-debug-modules-extra-4.18.0-305.28.1.el8_4.x86_64.rpm
RedHat8x86_64kernel-debuginfo-common-x86_64< 4.18.0-305.28.1.el8_4kernel-debuginfo-common-x86_64-4.18.0-305.28.1.el8_4.x86_64.rpm
RedHat8aarch64kernel-debuginfo-common-aarch64< 4.18.0-305.28.1.el8_4kernel-debuginfo-common-aarch64-4.18.0-305.28.1.el8_4.aarch64.rpm
RedHat8s390xperf< 4.18.0-305.28.1.el8_4perf-4.18.0-305.28.1.el8_4.s390x.rpm
RedHat8s390xkernel-modules< 4.18.0-305.28.1.el8_4kernel-modules-4.18.0-305.28.1.el8_4.s390x.rpm
Rows per page:
1-10 of 1061

Related

redhat 13
nessus 85
oraclelinux 10
almalinux 2
osv 16
rocky 4
redhatcve 3
cve 4
ubuntucve 4
debiancve 4
githubexploit 1
cbl_mariner 4
veracode 3
prion 4
checkpoint_security 1
photon 3
thn 1
f5 2
threatpost 6
fedora 4
cnvd 1
ibm 2
ubuntu 9
redos 1
cloudfoundry 2
mageia 2
amazon 1
ics 1
suse 2
debian 4
redhat
redhat
(RHSA-2021:4648) Important: kernel-rt security and bug fix update
2021-11-15 09:57:42
(RHSA-2021:4646) Important: kernel-rt security and bug fix update
2021-11-15 09:56:17
(RHSA-2021:4647) Important: kernel security update
2021-11-15 09:57:15
nessus
nessus
RHEL 8 : kernel-rt (RHSA-2021:4648)
2021-11-16 00:00:00
RHEL 8 : kernel (RHSA-2021:4650)
2021-11-16 00:00:00
Oracle Linux 8 : kernel (ELSA-2021-4647)
2021-11-18 00:00:00
oraclelinux
oraclelinux
kernel security update
2021-11-18 00:00:00
Unbreakable Enterprise kernel-container security update
2021-10-01 00:00:00
Unbreakable Enterprise kernel security update
2021-10-01 00:00:00
almalinux
almalinux
Important: kernel security update
2021-11-15 09:57:15
Moderate: kernel security, bug fix, and enhancement update
2021-11-09 09:08:02
osv
osv
Important: kernel security update
2021-11-15 09:57:15
Important: kernel security update
2021-11-15 09:57:15
Important: kernel-rt security and bug fix update
2021-11-15 09:56:17
rocky
rocky
kernel-rt security and bug fix update
2021-11-15 09:56:17
kernel security update
2021-11-15 09:57:15
kernel security, bug fix, and enhancement update
2021-11-16 07:31:29
redhatcve
redhatcve
CVE-2021-20317
2021-09-23 16:26:57
CVE-2021-43267
2021-11-04 16:39:57
CVE-2021-28950
2021-03-22 18:37:43
cve
cve
CVE-2021-20317
2021-09-27 11:15:00
CVE-2021-43267
2021-11-02 23:15:00
CVE-2021-28950
2021-03-20 20:15:00
ubuntucve
ubuntucve
CVE-2021-20317
2021-09-27 00:00:00
CVE-2021-43267
2021-11-02 00:00:00
CVE-2021-28950
2021-03-20 00:00:00
debiancve
debiancve
CVE-2021-20317
2021-09-27 11:15:00
CVE-2021-43267
2021-11-02 23:15:00
CVE-2021-28950
2021-03-20 20:15:00
githubexploit
githubexploit
Exploit for Improper Input Validation in Linux Linux Kernel
2021-11-26 01:51:57
cbl_mariner
cbl_mariner
CVE-2021-43267 affecting package kernel 5.10.78.1-1
2022-04-09 06:52:47
CVE-2021-43267 affecting package kernel 5.10.111.1-1
2021-12-17 20:10:00
CVE-2021-28950 affecting package kernel 5.10.78.1-1
2022-04-09 06:52:47
veracode
veracode
Information Disclosure
2021-11-28 00:40:58
Denial Of Service (DoS)
2021-11-28 00:41:03
Denial Of Service (DoS)
2021-06-06 10:35:34
prion
prion
Input validation
2021-11-02 23:15:00
Design/Logic Flaw
2021-09-27 11:15:00
Design/Logic Flaw
2021-03-20 20:15:00
checkpoint_security
checkpoint_security
Check Point response to CVE-2021-43267
2021-12-12 06:42:28
photon
photon
Critical Photon OS Security Update - PHSA-2021-0127
2021-11-11 00:00:00
Critical Photon OS Security Update - PHSA-2021-4.0-0127
2021-11-11 00:00:00
Important Photon OS Security Update - PHSA-2021-3.0-0325
2021-11-04 00:00:00
thn
thn
Critical RCE Vulnerability Reported in Linux Kernel's TIPC Module
2021-11-04 12:09:00
f5
f5
K20072454 : Linux kernel vulnerability CVE-2021-43267
2021-11-23 00:00:00
K01311152 : Linux kernel vulnerabilities CVE-2020-36322 and CVE-2021-28950
2022-04-12 00:00:00
threatpost
threatpost
Mekotio Banking Trojan Resurges with Tweaked Code, Stealthy Campaign
2021-11-03 19:47:38
Millions of Routers Exposed to RCE by USB Kernel Bug
2022-01-11 12:00:04
Apple macOS Flaw Allows Kernel-Level Compromise
2021-11-02 15:50:51
fedora
fedora
[SECURITY] Fedora 34 Update: kernel-5.14.16-201.fc34
2021-11-06 01:40:33
[SECURITY] Fedora 35 Update: kernel-5.14.16-301.fc35
2021-11-06 01:28:25
[SECURITY] Fedora 33 Update: kernel-5.11.8-200.fc33
2021-03-24 02:41:30
cnvd
cnvd
Linux kernel has unspecified vulnerabilities (CNVD-2022-06509)
2021-09-27 00:00:00
ibm
ibm
Security Bulletin: Publicly disclosed vulnerabilities from Kernel affect IBM Netezza Host Management
2021-07-21 18:08:24
Security Bulletin: Multiple vulnerabilities in Linux Kernel affect IBM Spectrum Protect Plus
2022-06-29 23:37:51
ubuntu
ubuntu
Linux kernel (OEM) vulnerabilities
2022-01-05 00:00:00
Linux kernel (OEM) vulnerabilities
2021-04-13 00:00:00
Linux kernel vulnerabilities
2022-01-06 00:00:00
redos
redos
ROS-20220207-01
2022-02-07 00:00:00
cloudfoundry
cloudfoundry
USN-5209-1: Linux kernel vulnerabilities | Cloud Foundry
2022-03-08 00:00:00
USN-4982-1: Linux kernel vulnerabilities | Cloud Foundry
2021-06-11 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2021-11-11 18:02:40
Updated kernel-linus packages fix security vulnerabilities
2021-11-11 18:02:40
amazon
amazon
Important: kernel
2021-10-28 23:22:00
ics
ics
Siemens SCALANCE LPE9403 Third-Party Vulnerabilities
2022-06-16 12:00:00
suse
suse
Security update for the Linux Kernel (important)
2021-04-19 00:00:00
Security update for the Linux Kernel (important)
2021-05-22 00:00:00
debian
debian
[SECURITY] [DLA 2843-1] linux security update
2021-12-16 21:27:40
[SECURITY] [DLA 2941-1] linux-4.19 security update
2022-03-09 12:40:55
[SECURITY] [DSA 5096-1] linux security update
2022-03-09 15:30:58

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.044 Low

EPSS

Percentile

92.3%

JSON
Related for RHSA-2021:4650
redhat13nessus85oraclelinux10almalinux2osv16rocky4redhatcve3cve4ubuntucve4debiancve4githubexploit1cbl_mariner4veracode3prion4checkpoint_security1photon3thn1f52threatpost6fedora4cnvd1ibm2ubuntu9redos1cloudfoundry2mageia2amazon1ics1suse2debian4