RHSA-2021:1093: Important: kernel security, bug fix, and enhancement update

First published: Tue Apr 06 2021(Updated: )

The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> kernel: use after free in eventpoll.c may lead to escalation of privilege (CVE-2020-0466)</li> <li> kernel: SCSI target (LIO) write to any block on ILO backstore (CVE-2020-28374)</li> <li> kernel: Use after free via PI futex state (CVE-2021-3347)</li> <li> kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c (CVE-2021-26708)</li> <li> kernel: out-of-bounds read in libiscsi module (CVE-2021-27364)</li> <li> kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365)</li> <li> Kernel: KVM: host stack overflow due to lazy update IOAPIC (CVE-2020-27152)</li> <li> kernel: iscsi: unrestricted access to sessions and handles (CVE-2021-27363)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> race condition when creating child sockets from syncookies (BZ#1915529)</li> <li> On System Z, a hash needs state randomized for entropy extraction (BZ#1915816)</li> <li> scsi: target: core_tmr_abort_task() reporting multiple aborts for the same se_cmd-&gt;tag (BZ#1918354)</li> <li> [mlx5] VF interface stats are not reflected in "ip -s link show" / "ifconfig &lt;vf&gt;" commands (BZ#1921060)</li> <li> Win10 guest automatic reboot after migration in Win10 and WSL2 on Intel hosts (BZ#1923281)</li> <li> [RHEL 8.3] Repeated messages - Unable to burst-read optrom segment (BZ#1924222)</li> <li> Backport bug fix RDMA/umem: Prevent small pages from being returned by ib_umem_find_best_pgsz (BZ#1924691)</li> <li> [Cisco 8.3] RHEL/Cent 8.2 fNIC driver needs a patch fix that addresses crash (BZ#1925186)</li> <li> RHEL8.3 - The kernel misdetects zCX with z/VM (BZ#1925508)</li> <li> Backport 22e4663e91 ("mm/slub: fix panic in slab_alloc_node()") (BZ#1925511)</li> <li> SCTP "Address already in use" when no active endpoints from RHEL 8.2 onwards (BZ#1927521)</li> <li> lpfc: Fix initial FLOGI failure due to BBSCN not supported (BZ#1927921)</li> <li> [mm] mm, oom: remove oom_lock from oom_reaper (BZ#1929738)</li> <li> Unexpected thread movement with AMD Milan compared to Rome (BZ#1929740)</li> <li> rpmbuild cannot build the userspace RPMs in the kernel package when the kernel itself is not built (BZ#1929910)</li> <li> [Regression] RHEL8.2 - ISST-LTE:pVM:diapvmlp83:sum:memory DLPAR fails to add memory on multiple trials[mm/memory_hotplug.c:1163] (mm-) (BZ#1930168)</li> <li> Configuring the system with non-RT kernel will hang the system (BZ#1930735)</li> <li> Upstream Patch for Gracefully handle DMAR units with no supported address widthsx86/vt-d (BZ#1932199)</li> <li> gfs2: Deadlock between gfs2_{create_inode,inode_lookup} and delete_work_func (BZ#1937109)</li> <li> Failing on tsx-ctrl when the flag doesn't change anything (BZ#1939013)</li> Enhancement(s):<br><li> RFE: Backport all Audit enhancements and fixes up to version 5.10-rc1 (BZ#1907520)</li> <li> RHEL8.4: Update the target driver (BZ#1918363)</li> <li> [Mellanox 8.4 FEAT] mlx5: Hairpin Support in Switch Mode (BZ#1924689)</li>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/severity
• agent/references
• agent/type
• agent/last-modified-date
• agent/softwarecombine
• agent/first-publish-date
• agent/remedy
• agent/weakness
• agent/title
• agent/description
• agent/tags
• agent/event
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2021:1093
• agent/software-canonical-lookup
• package-manager/redhat