First published: Tue Jul 20 2021(Updated: )
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.<br>Security Fix(es):<br><li> kernel: size_t-to-int conversion vulnerability in the filesystem layer (CVE-2021-33909)</li> <li> kernel: Use after free via PI futex state (CVE-2021-3347)</li> <li> kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan (CVE-2021-33034)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/kpatch-patch | <3_10_0-957_58_2-1-4.el7 | 3_10_0-957_58_2-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_61_1-1-4.el7 | 3_10_0-957_61_1-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_61_2-1-4.el7 | 3_10_0-957_61_2-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_62_1-1-4.el7 | 3_10_0-957_62_1-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_65_1-1-4.el7 | 3_10_0-957_65_1-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_66_1-1-4.el7 | 3_10_0-957_66_1-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_70_1-1-3.el7 | 3_10_0-957_70_1-1-3.el7 |
redhat/kpatch-patch | <3_10_0-957_72_1-1-1.el7 | 3_10_0-957_72_1-1-1.el7 |
redhat/kpatch-patch | <3_10_0-957_76_1-1-1.el7 | 3_10_0-957_76_1-1-1.el7 |
redhat/kpatch-patch | <3_10_0-957_58_2-1-4.el7 | 3_10_0-957_58_2-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_58_2-debuginfo-1-4.el7 | 3_10_0-957_58_2-debuginfo-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_61_1-1-4.el7 | 3_10_0-957_61_1-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_61_1-debuginfo-1-4.el7 | 3_10_0-957_61_1-debuginfo-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_61_2-1-4.el7 | 3_10_0-957_61_2-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_61_2-debuginfo-1-4.el7 | 3_10_0-957_61_2-debuginfo-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_62_1-1-4.el7 | 3_10_0-957_62_1-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_62_1-debuginfo-1-4.el7 | 3_10_0-957_62_1-debuginfo-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_65_1-1-4.el7 | 3_10_0-957_65_1-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_65_1-debuginfo-1-4.el7 | 3_10_0-957_65_1-debuginfo-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_66_1-1-4.el7 | 3_10_0-957_66_1-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_66_1-debuginfo-1-4.el7 | 3_10_0-957_66_1-debuginfo-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_70_1-1-3.el7 | 3_10_0-957_70_1-1-3.el7 |
redhat/kpatch-patch | <3_10_0-957_70_1-debuginfo-1-3.el7 | 3_10_0-957_70_1-debuginfo-1-3.el7 |
redhat/kpatch-patch | <3_10_0-957_72_1-1-1.el7 | 3_10_0-957_72_1-1-1.el7 |
redhat/kpatch-patch | <3_10_0-957_72_1-debuginfo-1-1.el7 | 3_10_0-957_72_1-debuginfo-1-1.el7 |
redhat/kpatch-patch | <3_10_0-957_76_1-1-1.el7 | 3_10_0-957_76_1-1-1.el7 |
redhat/kpatch-patch | <3_10_0-957_76_1-debuginfo-1-1.el7 | 3_10_0-957_76_1-debuginfo-1-1.el7 |
redhat/kpatch-patch | <3_10_0-957_58_2-1-4.el7 | 3_10_0-957_58_2-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_58_2-debuginfo-1-4.el7 | 3_10_0-957_58_2-debuginfo-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_61_1-1-4.el7 | 3_10_0-957_61_1-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_61_1-debuginfo-1-4.el7 | 3_10_0-957_61_1-debuginfo-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_61_2-1-4.el7 | 3_10_0-957_61_2-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_61_2-debuginfo-1-4.el7 | 3_10_0-957_61_2-debuginfo-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_62_1-1-4.el7 | 3_10_0-957_62_1-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_62_1-debuginfo-1-4.el7 | 3_10_0-957_62_1-debuginfo-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_65_1-1-4.el7 | 3_10_0-957_65_1-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_65_1-debuginfo-1-4.el7 | 3_10_0-957_65_1-debuginfo-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_66_1-1-4.el7 | 3_10_0-957_66_1-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_66_1-debuginfo-1-4.el7 | 3_10_0-957_66_1-debuginfo-1-4.el7 |
redhat/kpatch-patch | <3_10_0-957_70_1-1-3.el7 | 3_10_0-957_70_1-1-3.el7 |
redhat/kpatch-patch | <3_10_0-957_70_1-debuginfo-1-3.el7 | 3_10_0-957_70_1-debuginfo-1-3.el7 |
redhat/kpatch-patch | <3_10_0-957_72_1-1-1.el7 | 3_10_0-957_72_1-1-1.el7 |
redhat/kpatch-patch | <3_10_0-957_72_1-debuginfo-1-1.el7 | 3_10_0-957_72_1-debuginfo-1-1.el7 |
redhat/kpatch-patch | <3_10_0-957_76_1-1-1.el7 | 3_10_0-957_76_1-1-1.el7 |
redhat/kpatch-patch | <3_10_0-957_76_1-debuginfo-1-1.el7 | 3_10_0-957_76_1-debuginfo-1-1.el7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2021:2731 is high due to critical vulnerabilities in the kernel that could lead to privilege escalation or system compromise.
To fix RHSA-2021:2731, update to the recommended versions of the kpatch-patch package as specified in the advisory.
RHSA-2021:2731 addresses a size_t-to-int conversion vulnerability and a use-after-free vulnerability in the kernel.
RHSA-2021:2731 affects Red Hat Enterprise Linux 7 systems using the specified versions of the kpatch-patch package.
RHSA-2021:2731 was released on December 7, 2021.