CWE
416
Advisory Published

RHSA-2021:2719: Important: kernel-rt security and bug fix update

First published: Tue Jul 20 2021(Updated: )

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.<br>Security Fix(es):<br><li> kernel: size_t-to-int conversion vulnerability in the filesystem layer (CVE-2021-33909)</li> <li> kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan (CVE-2021-33034)</li> <li> kernel: perf_event_parse_addr_filter memory (CVE-2020-25704)</li> <li> kernel: security bypass in certs/blacklist.c and certs/system_keyring.c (CVE-2020-26541)</li> <li> kernel: fork: fix copy_process(CLONE_PARENT) race with the exiting -&gt;real_parent (CVE-2020-35508)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> kernel-rt: update RT source tree to the latest RHEL-8.2.z10 Batch source tree (BZ#1968022)</li>

Affected SoftwareAffected VersionHow to fix
redhat/kernel-rt<4.18.0-193.60.2.rt13.112.el8_2
4.18.0-193.60.2.rt13.112.el8_2
redhat/kernel-rt<4.18.0-193.60.2.rt13.112.el8_2
4.18.0-193.60.2.rt13.112.el8_2
redhat/kernel-rt-core<4.18.0-193.60.2.rt13.112.el8_2
4.18.0-193.60.2.rt13.112.el8_2
redhat/kernel-rt-debug<4.18.0-193.60.2.rt13.112.el8_2
4.18.0-193.60.2.rt13.112.el8_2
redhat/kernel-rt-debug-core<4.18.0-193.60.2.rt13.112.el8_2
4.18.0-193.60.2.rt13.112.el8_2
redhat/kernel-rt-debug-debuginfo<4.18.0-193.60.2.rt13.112.el8_2
4.18.0-193.60.2.rt13.112.el8_2
redhat/kernel-rt-debug-devel<4.18.0-193.60.2.rt13.112.el8_2
4.18.0-193.60.2.rt13.112.el8_2
redhat/kernel-rt-debug-modules<4.18.0-193.60.2.rt13.112.el8_2
4.18.0-193.60.2.rt13.112.el8_2
redhat/kernel-rt-debug-modules-extra<4.18.0-193.60.2.rt13.112.el8_2
4.18.0-193.60.2.rt13.112.el8_2
redhat/kernel-rt-debuginfo<4.18.0-193.60.2.rt13.112.el8_2
4.18.0-193.60.2.rt13.112.el8_2
redhat/kernel-rt-devel<4.18.0-193.60.2.rt13.112.el8_2
4.18.0-193.60.2.rt13.112.el8_2
redhat/kernel-rt-modules<4.18.0-193.60.2.rt13.112.el8_2
4.18.0-193.60.2.rt13.112.el8_2
redhat/kernel-rt-modules-extra<4.18.0-193.60.2.rt13.112.el8_2
4.18.0-193.60.2.rt13.112.el8_2
redhat/kernel-rt-debug-kvm<4.18.0-193.60.2.rt13.112.el8_2
4.18.0-193.60.2.rt13.112.el8_2
redhat/kernel-rt-kvm<4.18.0-193.60.2.rt13.112.el8_2
4.18.0-193.60.2.rt13.112.el8_2

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of RHSA-2021:2719?

    The severity of RHSA-2021:2719 is categorized as important due to its potential impact on system security.

  • How do I fix RHSA-2021:2719?

    To fix RHSA-2021:2719, update the affected kernel-rt packages to version 4.18.0-193.60.2.rt13.112.el8_2 or higher.

  • What vulnerabilities are addressed in RHSA-2021:2719?

    RHSA-2021:2719 addresses a size_t-to-int conversion vulnerability in the filesystem layer (CVE-2021-33909).

  • Which packages are affected by RHSA-2021:2719?

    RHSA-2021:2719 affects several packages including kernel-rt, kernel-rt-core, and kernel-rt-debug among others.

  • Is RHSA-2021:2719 applicable to all systems?

    RHSA-2021:2719 is specifically applicable to systems running the Real Time Linux Kernel provided by Red Hat.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203