RHSA-2021:1173: Important: kpatch-patch security update
Published Apr 13, 2021
·Updated
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.<br>Security Fix(es):<br><li> kernel: out-of-bounds read in libiscsi module (CVE-2021-27364)</li> <li> kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
56 affected componentsFixes available
redhat/kpatch-patch<4_18_0-147_13_2-1-9.el8_1
4_18_0-147_13_2-1-9.el8_1
redhat/kpatch-patch<4_18_0-147_20_1-1-8.el8_1
4_18_0-147_20_1-1-8.el8_1
redhat/kpatch-patch<4_18_0-147_24_2-1-6.el8_1
4_18_0-147_24_2-1-6.el8_1
redhat/kpatch-patch<4_18_0-147_27_1-1-6.el8_1
4_18_0-147_27_1-1-6.el8_1
redhat/kpatch-patch<4_18_0-147_32_1-1-4.el8_1
4_18_0-147_32_1-1-4.el8_1
redhat/kpatch-patch<4_18_0-147_34_1-1-4.el8_1
4_18_0-147_34_1-1-4.el8_1
redhat/kpatch-patch<4_18_0-147_38_1-1-3.el8_1
4_18_0-147_38_1-1-3.el8_1
redhat/kpatch-patch<4_18_0-147_43_1-1-1.el8_1
4_18_0-147_43_1-1-1.el8_1
redhat/kpatch-patch<4_18_0-147_13_2-1-9.el8_1
4_18_0-147_13_2-1-9.el8_1
redhat/kpatch-patch<4_18_0-147_13_2-debuginfo-1-9.el8_1
4_18_0-147_13_2-debuginfo-1-9.el8_1
redhat/kpatch-patch<4_18_0-147_13_2-debugsource-1-9.el8_1
4_18_0-147_13_2-debugsource-1-9.el8_1
redhat/kpatch-patch<4_18_0-147_20_1-1-8.el8_1
4_18_0-147_20_1-1-8.el8_1
redhat/kpatch-patch<4_18_0-147_20_1-debuginfo-1-8.el8_1
4_18_0-147_20_1-debuginfo-1-8.el8_1
redhat/kpatch-patch<4_18_0-147_20_1-debugsource-1-8.el8_1
4_18_0-147_20_1-debugsource-1-8.el8_1
redhat/kpatch-patch<4_18_0-147_24_2-1-6.el8_1
4_18_0-147_24_2-1-6.el8_1
redhat/kpatch-patch<4_18_0-147_24_2-debuginfo-1-6.el8_1
4_18_0-147_24_2-debuginfo-1-6.el8_1
redhat/kpatch-patch<4_18_0-147_24_2-debugsource-1-6.el8_1
4_18_0-147_24_2-debugsource-1-6.el8_1
redhat/kpatch-patch<4_18_0-147_27_1-1-6.el8_1
4_18_0-147_27_1-1-6.el8_1
redhat/kpatch-patch<4_18_0-147_27_1-debuginfo-1-6.el8_1
4_18_0-147_27_1-debuginfo-1-6.el8_1
redhat/kpatch-patch<4_18_0-147_27_1-debugsource-1-6.el8_1
4_18_0-147_27_1-debugsource-1-6.el8_1
redhat/kpatch-patch<4_18_0-147_32_1-1-4.el8_1
4_18_0-147_32_1-1-4.el8_1
redhat/kpatch-patch<4_18_0-147_32_1-debuginfo-1-4.el8_1
4_18_0-147_32_1-debuginfo-1-4.el8_1
redhat/kpatch-patch<4_18_0-147_32_1-debugsource-1-4.el8_1
4_18_0-147_32_1-debugsource-1-4.el8_1
redhat/kpatch-patch<4_18_0-147_34_1-1-4.el8_1
4_18_0-147_34_1-1-4.el8_1
redhat/kpatch-patch<4_18_0-147_34_1-debuginfo-1-4.el8_1
4_18_0-147_34_1-debuginfo-1-4.el8_1
redhat/kpatch-patch<4_18_0-147_34_1-debugsource-1-4.el8_1
4_18_0-147_34_1-debugsource-1-4.el8_1
redhat/kpatch-patch<4_18_0-147_38_1-1-3.el8_1
4_18_0-147_38_1-1-3.el8_1
redhat/kpatch-patch<4_18_0-147_38_1-debuginfo-1-3.el8_1
4_18_0-147_38_1-debuginfo-1-3.el8_1
redhat/kpatch-patch<4_18_0-147_38_1-debugsource-1-3.el8_1
4_18_0-147_38_1-debugsource-1-3.el8_1
redhat/kpatch-patch<4_18_0-147_43_1-1-1.el8_1
4_18_0-147_43_1-1-1.el8_1
redhat/kpatch-patch<4_18_0-147_43_1-debuginfo-1-1.el8_1
4_18_0-147_43_1-debuginfo-1-1.el8_1
redhat/kpatch-patch<4_18_0-147_43_1-debugsource-1-1.el8_1
4_18_0-147_43_1-debugsource-1-1.el8_1
redhat/kpatch-patch<4_18_0-147_13_2-1-9.el8_1
4_18_0-147_13_2-1-9.el8_1
redhat/kpatch-patch<4_18_0-147_13_2-debuginfo-1-9.el8_1
4_18_0-147_13_2-debuginfo-1-9.el8_1
redhat/kpatch-patch<4_18_0-147_13_2-debugsource-1-9.el8_1
4_18_0-147_13_2-debugsource-1-9.el8_1
redhat/kpatch-patch<4_18_0-147_20_1-1-8.el8_1
4_18_0-147_20_1-1-8.el8_1
redhat/kpatch-patch<4_18_0-147_20_1-debuginfo-1-8.el8_1
4_18_0-147_20_1-debuginfo-1-8.el8_1
redhat/kpatch-patch<4_18_0-147_20_1-debugsource-1-8.el8_1
4_18_0-147_20_1-debugsource-1-8.el8_1
redhat/kpatch-patch<4_18_0-147_24_2-1-6.el8_1
4_18_0-147_24_2-1-6.el8_1
redhat/kpatch-patch<4_18_0-147_24_2-debuginfo-1-6.el8_1
4_18_0-147_24_2-debuginfo-1-6.el8_1
redhat/kpatch-patch<4_18_0-147_24_2-debugsource-1-6.el8_1
4_18_0-147_24_2-debugsource-1-6.el8_1
redhat/kpatch-patch<4_18_0-147_27_1-1-6.el8_1
4_18_0-147_27_1-1-6.el8_1
redhat/kpatch-patch<4_18_0-147_27_1-debuginfo-1-6.el8_1
4_18_0-147_27_1-debuginfo-1-6.el8_1
redhat/kpatch-patch<4_18_0-147_27_1-debugsource-1-6.el8_1
4_18_0-147_27_1-debugsource-1-6.el8_1
redhat/kpatch-patch<4_18_0-147_32_1-1-4.el8_1
4_18_0-147_32_1-1-4.el8_1
redhat/kpatch-patch<4_18_0-147_32_1-debuginfo-1-4.el8_1
4_18_0-147_32_1-debuginfo-1-4.el8_1
redhat/kpatch-patch<4_18_0-147_32_1-debugsource-1-4.el8_1
4_18_0-147_32_1-debugsource-1-4.el8_1
redhat/kpatch-patch<4_18_0-147_34_1-1-4.el8_1
4_18_0-147_34_1-1-4.el8_1
redhat/kpatch-patch<4_18_0-147_34_1-debuginfo-1-4.el8_1
4_18_0-147_34_1-debuginfo-1-4.el8_1
redhat/kpatch-patch<4_18_0-147_34_1-debugsource-1-4.el8_1
4_18_0-147_34_1-debugsource-1-4.el8_1
redhat/kpatch-patch<4_18_0-147_38_1-1-3.el8_1
4_18_0-147_38_1-1-3.el8_1
redhat/kpatch-patch<4_18_0-147_38_1-debuginfo-1-3.el8_1
4_18_0-147_38_1-debuginfo-1-3.el8_1
redhat/kpatch-patch<4_18_0-147_38_1-debugsource-1-3.el8_1
4_18_0-147_38_1-debugsource-1-3.el8_1
redhat/kpatch-patch<4_18_0-147_43_1-1-1.el8_1
4_18_0-147_43_1-1-1.el8_1
redhat/kpatch-patch<4_18_0-147_43_1-debuginfo-1-1.el8_1
4_18_0-147_43_1-debuginfo-1-1.el8_1
redhat/kpatch-patch<4_18_0-147_43_1-debugsource-1-1.el8_1
4_18_0-147_43_1-debugsource-1-1.el8_1
Remediation
Event History
Jan 10, 2025
Advisory Published
via Red Hat·10:34 AM
Frequently Asked Questions
1
What is the severity of RHSA-2021:1173?
The severity of RHSA-2021:1173 is classified as important.
2
How do I fix RHSA-2021:1173?
To fix RHSA-2021:1173, update to the latest version of the kpatch-patch package as specified in the advisory.
3
What types of vulnerabilities are addressed in RHSA-2021:1173?
RHSA-2021:1173 addresses an out-of-bounds read and a heap buffer overflow in the libiscsi module.
4
Which versions of kpatch-patch are affected by RHSA-2021:1173?
Affected versions of kpatch-patch include 4_18_0-147_13_2-1-9.el8_1 and various other updates as listed in the advisory.
5
What is the impact of not addressing RHSA-2021:1173?
Failure to address RHSA-2021:1173 could lead to potential exploitation of the vulnerabilities, allowing unauthorized access to system resources.