RHSA-2020:2125: Important: kpatch-patch security update
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.Security Fix(es): Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic (CVE-2020-10711) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 4_18_0-193-1-2.el8 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 4_18_0-193-debuginfo-1-2.el8 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 4_18_0-193-debugsource-1-2.el8 - Upgrade
Upgrade
kpatch-patch-4_18_0-193to a version that resolves this vulnerability.Patch kpatch-patch-4_18_0-193-1-2.el8 - Upgrade
Upgrade
kpatch-patch-4_18_0-193 (debuginfo/debugsource)to a version that resolves this vulnerability.Patch kpatch-patch-4_18_0-193-debuginfo-1-2.el8
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:2125?
The severity of RHSA-2020:2125 is classified as Important.
How do I fix RHSA-2020:2125?
To fix RHSA-2020:2125, update the kpatch-patch package to version 4_18_0-193-1-2.el8 or later.
What systems are affected by RHSA-2020:2125?
RHSA-2020:2125 affects systems running the kpatch-patch package prior to version 4_18_0-193-1-2.el8.
What issues does RHSA-2020:2125 address?
RHSA-2020:2125 addresses a kernel vulnerability that may cause a null pointer dereference and kernel panic when receiving a CIPSO packet.
Is there a workaround for RHSA-2020:2125?
There is no specific workaround for RHSA-2020:2125; applying the recommended updates is necessary to mitigate the vulnerability.