RHEL 8 : kernel (RHSA-2021:2168)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2168 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: userspace applications can...

PT-2021-29032

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.12.8 Description The issue is related to an out-of-bounds OOB access in the traffic path of the fq pie component in the Linux Kernel's net/sched module. The actual impact and attack plausibility have not y...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

RLSA-2021:2168 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: userspace applications can misuse the KVM API to cause a write of 16 bytes at an offset up to 32 GB from vcpu-run CVE-2021-3501 kernel: nitroenclaves stale file descriptors on failed...

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: userspace applications can misuse the KVM API to cause a write of 16 bytes at an offset up to 32 GB from vcpu-run CVE-2021-3501 kernel: nitroenclaves stale file descriptors on failed...

GSD-2021-1000109 net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets

net/sched: schfrag: fix stack OOB read while fragmenting IPv4 packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

GSD-2021-1000273 sched/fair: Fix shift-out-of-bounds in load_balance()

sched/fair: Fix shift-out-of-bounds in loadbalance This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000326 sched: Fix out-of-bound access in uclamp

sched: Fix out-of-bound access in uclamp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

GSD-2021-1000228 net/sched: act_ct: fix wild memory access when clearing fragments

net/sched: actct: fix wild memory access when clearing fragments This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000228 net/sched: act_ct: fix wild memory access when clearing fragments

net/sched: actct: fix wild memory access when clearing fragments This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000070 net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets

net/sched: schfrag: fix stack OOB read while fragmenting IPv4 packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

UVI-2021-1000412 sched: Fix out-of-bound access in uclamp

sched: Fix out-of-bound access in uclamp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.120 by commit...

GSD-2021-1000070 net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets

net/sched: schfrag: fix stack OOB read while fragmenting IPv4 packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

UVI-2021-1000109 net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets

net/sched: schfrag: fix stack OOB read while fragmenting IPv4 packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

PT-2021-28877

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.120 Description The issue concerns an out-of-bound access in uclamp within the sched component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-24883

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.120 Description: The issue concerns an out-of-bound access in uclamp within the sched component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2021-24677

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.3 through v5.12.4 Description The issue concerns an out-of-bound access in uclamp within the sched component. It was introduced in version v5.3 and fixed in version v5.12.5. The actual impact and attack plausibility ha...

kernel security, bug fix, and enhancement update

4.18.0-240.22.13.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel security, bug fix, and enhancement update

4.18.0-240.15.13.OL8 - Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x6...

Unbreakable Enterprise kernel security update

4.1.12-124.46.3 - mwifiex: fix possible heap overflow in mwifiexprocesscountryie Ganapathi Bhat Orabug: 30781859 CVE-2019-14895 CVE-2019-14895 - ext4: fix ext4emptydir for directories with holes Jan Kara Orabug: 31265320 CVE-2019-19037 CVE-2019-19037 - netlabel: cope with NULL catmap Paolo Abeni...