RHSA-2021:1069: Important: kpatch-patch security update
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.Security Fix(es): kernel: out-of-bounds read in libiscsi module (CVE-2021-27364) kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 3_10_0-1160-1-5.el7 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 3_10_0-1160_11_1-1-4.el7 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 3_10_0-1160_15_2-1-4.el7 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 3_10_0-1160_21_1-1-2.el7 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 3_10_0-1160_2_1-1-5.el7 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 3_10_0-1160_2_2-1-5.el7 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 3_10_0-1160_6_1-1-5.el7 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 3_10_0-1160-debuginfo-1-5.el7 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 3_10_0-1160_11_1-debuginfo-1-4.el7 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 3_10_0-1160_15_2-debuginfo-1-4.el7 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 3_10_0-1160_21_1-debuginfo-1-2.el7 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 3_10_0-1160_2_1-debuginfo-1-5.el7 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 3_10_0-1160_2_2-debuginfo-1-5.el7 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 3_10_0-1160_6_1-debuginfo-1-5.el7
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:1069?
The severity of RHSA-2021:1069 is classified as important.
How do I fix RHSA-2021:1069?
To fix RHSA-2021:1069, apply the latest kernel live patch provided by Red Hat for the package kpatch-patch.
What vulnerabilities are addressed in RHSA-2021:1069?
RHSA-2021:1069 addresses an out-of-bounds read in the libiscsi module and a heap buffer overflow in the iSCSI subsystem.
Which systems are affected by RHSA-2021:1069?
The affected systems include those using kpatch-patch versions prior to 3_10_0-1160-1-5.el7 on Red Hat Enterprise Linux.
What is the impact of not addressing RHSA-2021:1069?
Not addressing RHSA-2021:1069 could lead to potential exploitation of the out-of-bounds read and heap buffer overflow vulnerabilities.