What is the severity of RHSA-2021:3445?

The severity of RHSA-2021:3445 is classified as important.

What types of systems are affected by RHSA-2021:3445?

RHSA-2021:3445 affects Real Time Linux Kernel packages, specifically designed for systems requiring high determinism.

How do I fix RHSA-2021:3445?

To fix RHSA-2021:3445, update to the kernel-rt package version 4.18.0-193.65.2.rt13.117.el8_2.

Which packages are impacted by RHSA-2021:3445?

The impacted packages under RHSA-2021:3445 include kernel-rt, kernel-rt-core, kernel-rt-debug, and their related modules.

What is the nature of the vulnerability in RHSA-2021:3445?

The vulnerability in RHSA-2021:3445 is an out-of-bounds write caused by a heap buffer overflow in specific kernel functions.

Vulnerability/
RHSA-2021:3445

CWE

119 416

7/9/2021

RHSA-2021:3445: Important: kernel-rt security and bug fix update

First published: Tue Sep 07 2021(Updated: )

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.<br>Security Fix(es):<br><li> kernel: out-of-bounds write due to a heap buffer overflow in __hidinput_change_resolution_multipliers() of hid-input.c (CVE-2021-0512)</li> <li> kernel: use-after-free in route4_change() in net/sched/cls_route.c (CVE-2021-3715)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> OSLAT spikes on subset of cpus (BZ#1986064)</li> <li> Failure to enter full_nohz due to needless SCHED softirqs (BZ#1990273)</li> <li> kernel-rt: update RT source tree to the latest RHEL-8.2.z12 Batch source tree (BZ#1997761)</li>

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of RHSA-2021:3445?
The severity of RHSA-2021:3445 is classified as important.
What types of systems are affected by RHSA-2021:3445?
RHSA-2021:3445 affects Real Time Linux Kernel packages, specifically designed for systems requiring high determinism.
How do I fix RHSA-2021:3445?
To fix RHSA-2021:3445, update to the kernel-rt package version 4.18.0-193.65.2.rt13.117.el8_2.
Which packages are impacted by RHSA-2021:3445?
The impacted packages under RHSA-2021:3445 include kernel-rt, kernel-rt-core, kernel-rt-debug, and their related modules.
What is the nature of the vulnerability in RHSA-2021:3445?
The vulnerability in RHSA-2021:3445 is an out-of-bounds write caused by a heap buffer overflow in specific kernel functions.

agent/weakness
agent/severity
agent/references
agent/type
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2021:3445
agent/software-canonical-lookup
agent/title
agent/remedy
agent/description
agent/event
agent/trending
agent/tags
agent/source
package-manager/redhat