RHSA-2021:4122: Important: kpatch-patch security update
Published Nov 3, 2021
·Updated
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.Security Fix(es): kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free (CVE-2020-36385) kernel: out-of-bounds write due to a heap buffer overflow in hidinputchangeresolutionmultipliers() of hid-input.c (CVE-2021-0512)For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
49 affected componentsFixes available
redhat/kpatch-patch<4_18_0-305-1-6.el8
4_18_0-305-1-6.el8
redhat/kpatch-patch<4_18_0-305_10_2-1-3.el8_4
4_18_0-305_10_2-1-3.el8_4
redhat/kpatch-patch<4_18_0-305_12_1-1-2.el8_4
4_18_0-305_12_1-1-2.el8_4
redhat/kpatch-patch<4_18_0-305_17_1-1-1.el8_4
4_18_0-305_17_1-1-1.el8_4
redhat/kpatch-patch<4_18_0-305_19_1-1-1.el8_4
4_18_0-305_19_1-1-1.el8_4
redhat/kpatch-patch<4_18_0-305_3_1-1-5.el8_4
4_18_0-305_3_1-1-5.el8_4
redhat/kpatch-patch<4_18_0-305_7_1-1-4.el8_4
4_18_0-305_7_1-1-4.el8_4
redhat/kpatch-patch<4_18_0-305-1-6.el8
4_18_0-305-1-6.el8
redhat/kpatch-patch<4_18_0-305-debuginfo-1-6.el8
4_18_0-305-debuginfo-1-6.el8
redhat/kpatch-patch<4_18_0-305-debugsource-1-6.el8
4_18_0-305-debugsource-1-6.el8
redhat/kpatch-patch<4_18_0-305_10_2-1-3.el8_4
4_18_0-305_10_2-1-3.el8_4
redhat/kpatch-patch<4_18_0-305_10_2-debuginfo-1-3.el8_4
4_18_0-305_10_2-debuginfo-1-3.el8_4
redhat/kpatch-patch<4_18_0-305_10_2-debugsource-1-3.el8_4
4_18_0-305_10_2-debugsource-1-3.el8_4
redhat/kpatch-patch<4_18_0-305_12_1-1-2.el8_4
4_18_0-305_12_1-1-2.el8_4
redhat/kpatch-patch<4_18_0-305_12_1-debuginfo-1-2.el8_4
4_18_0-305_12_1-debuginfo-1-2.el8_4
redhat/kpatch-patch<4_18_0-305_12_1-debugsource-1-2.el8_4
4_18_0-305_12_1-debugsource-1-2.el8_4
redhat/kpatch-patch<4_18_0-305_17_1-1-1.el8_4
4_18_0-305_17_1-1-1.el8_4
redhat/kpatch-patch<4_18_0-305_17_1-debuginfo-1-1.el8_4
4_18_0-305_17_1-debuginfo-1-1.el8_4
redhat/kpatch-patch<4_18_0-305_17_1-debugsource-1-1.el8_4
4_18_0-305_17_1-debugsource-1-1.el8_4
redhat/kpatch-patch<4_18_0-305_19_1-1-1.el8_4
4_18_0-305_19_1-1-1.el8_4
redhat/kpatch-patch<4_18_0-305_19_1-debuginfo-1-1.el8_4
4_18_0-305_19_1-debuginfo-1-1.el8_4
redhat/kpatch-patch<4_18_0-305_19_1-debugsource-1-1.el8_4
4_18_0-305_19_1-debugsource-1-1.el8_4
redhat/kpatch-patch<4_18_0-305_3_1-1-5.el8_4
4_18_0-305_3_1-1-5.el8_4
redhat/kpatch-patch<4_18_0-305_3_1-debuginfo-1-5.el8_4
4_18_0-305_3_1-debuginfo-1-5.el8_4
redhat/kpatch-patch<4_18_0-305_3_1-debugsource-1-5.el8_4
4_18_0-305_3_1-debugsource-1-5.el8_4
redhat/kpatch-patch<4_18_0-305_7_1-1-4.el8_4
4_18_0-305_7_1-1-4.el8_4
redhat/kpatch-patch<4_18_0-305_7_1-debuginfo-1-4.el8_4
4_18_0-305_7_1-debuginfo-1-4.el8_4
redhat/kpatch-patch<4_18_0-305_7_1-debugsource-1-4.el8_4
4_18_0-305_7_1-debugsource-1-4.el8_4
redhat/kpatch-patch<4_18_0-305-1-6.el8
4_18_0-305-1-6.el8
redhat/kpatch-patch<4_18_0-305-debuginfo-1-6.el8
4_18_0-305-debuginfo-1-6.el8
redhat/kpatch-patch<4_18_0-305-debugsource-1-6.el8
4_18_0-305-debugsource-1-6.el8
redhat/kpatch-patch<4_18_0-305_10_2-1-3.el8_4
4_18_0-305_10_2-1-3.el8_4
redhat/kpatch-patch<4_18_0-305_10_2-debuginfo-1-3.el8_4
4_18_0-305_10_2-debuginfo-1-3.el8_4
redhat/kpatch-patch<4_18_0-305_10_2-debugsource-1-3.el8_4
4_18_0-305_10_2-debugsource-1-3.el8_4
redhat/kpatch-patch<4_18_0-305_12_1-1-2.el8_4
4_18_0-305_12_1-1-2.el8_4
redhat/kpatch-patch<4_18_0-305_12_1-debuginfo-1-2.el8_4
4_18_0-305_12_1-debuginfo-1-2.el8_4
redhat/kpatch-patch<4_18_0-305_12_1-debugsource-1-2.el8_4
4_18_0-305_12_1-debugsource-1-2.el8_4
redhat/kpatch-patch<4_18_0-305_17_1-1-1.el8_4
4_18_0-305_17_1-1-1.el8_4
redhat/kpatch-patch<4_18_0-305_17_1-debuginfo-1-1.el8_4
4_18_0-305_17_1-debuginfo-1-1.el8_4
redhat/kpatch-patch<4_18_0-305_17_1-debugsource-1-1.el8_4
4_18_0-305_17_1-debugsource-1-1.el8_4
redhat/kpatch-patch<4_18_0-305_19_1-1-1.el8_4
4_18_0-305_19_1-1-1.el8_4
redhat/kpatch-patch<4_18_0-305_19_1-debuginfo-1-1.el8_4
4_18_0-305_19_1-debuginfo-1-1.el8_4
redhat/kpatch-patch<4_18_0-305_19_1-debugsource-1-1.el8_4
4_18_0-305_19_1-debugsource-1-1.el8_4
redhat/kpatch-patch<4_18_0-305_3_1-1-5.el8_4
4_18_0-305_3_1-1-5.el8_4
redhat/kpatch-patch<4_18_0-305_3_1-debuginfo-1-5.el8_4
4_18_0-305_3_1-debuginfo-1-5.el8_4
redhat/kpatch-patch<4_18_0-305_3_1-debugsource-1-5.el8_4
4_18_0-305_3_1-debugsource-1-5.el8_4
redhat/kpatch-patch<4_18_0-305_7_1-1-4.el8_4
4_18_0-305_7_1-1-4.el8_4
redhat/kpatch-patch<4_18_0-305_7_1-debuginfo-1-4.el8_4
4_18_0-305_7_1-debuginfo-1-4.el8_4
redhat/kpatch-patch<4_18_0-305_7_1-debugsource-1-4.el8_4
4_18_0-305_7_1-debugsource-1-4.el8_4
Remediation
Event History
Jun 3, 2026
Advisory Published
via Red Hat·04:52 PM
Data Sourced
via Red Hat·04:52 PM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of RHSA-2021:4122?
The severity of RHSA-2021:4122 is classified as important.
2
How do I fix RHSA-2021:4122?
To fix RHSA-2021:4122, you need to apply the recommended patch for your affected version of the kpatch-patch package.
3
What vulnerabilities are addressed in RHSA-2021:4122?
RHSA-2021:4122 addresses a use-after-free vulnerability in drivers/infiniband/core/ucma.c, identified as CVE-2020-36385.
4
Which software versions are affected by RHSA-2021:4122?
Affected software versions include kpatch-patch version 4_18_0-305-1-6.el8 and other related versions listed in the advisory.
5
Is RHSA-2021:4122 associated with any specific Red Hat products?
Yes, RHSA-2021:4122 is associated with Red Hat Enterprise Linux 8 and its kernel live patch functionality.