RHSA-2021:2355: Important: kernel security and bug fix update
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: Integer overflow in Intel(R) Graphics Drivers (CVE-2020-12362) kernel: Local buffer overflow in ctnetlinkparsetuplefilter in net/netfilter/nfconntracknetlink.c (CVE-2020-25211) kernel: malicious USB devices can lead to multiple out-of-bounds write (CVE-2019-19532) kernel: ICMP rate limiting can be used for DNS poisoning attack (CVE-2020-25705) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): memcg: memcgroupidr can be updated in an uncoordinated manner which can lead to corruption (BZ#1931901) Kernel experiences panic in updategrouppower() due to division error even with Bug 1701115 fix (BZ#1961624)
Affected Software
Remediation
Event History
Frequently Asked Questions
What are the main security fixes in RHSA-2021:2355?
The main security fixes include an integer overflow in Intel Graphics Drivers (CVE-2020-12362) and a local buffer overflow issue in ctnetlink_parse_tuple_filter.
What is the severity of RHSA-2021:2355?
The severity is classified as critical due to the potential for remote code execution and denial of service.
How do I fix RHSA-2021:2355?
To fix the issue, update the kernel packages to version 3.10.0-957.76.1.el7 or later.
Which systems are affected by vulnerability RHSA-2021:2355?
Systems running affected versions of the Red Hat kernel and related packages are vulnerable to this issue.
Is a system reboot required after applying the fix for RHSA-2021:2355?
Yes, a system reboot is typically required to apply kernel updates after the packages are installed.