RHSA-2021:4650: Important: kernel security, bug fix, and enhancement update
Published Nov 15, 2021
·Updated
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: Insufficient validation of user-supplied sizes for the MSGCRYPTO message type (CVE-2021-43267) kernel: timer tree corruption leads to missing wakeup and system freeze (CVE-2021-20317) kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode (CVE-2021-28950) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): Fix repeated xhci wake after suspend due to uncleared internal wake state (BZ#2003789) CephFS mount points return "permission denied" (BZ#2017099) Enhancement(s): Update qla2xxx driver to latest upstream (BZ#2014150)
Affected Software
105 affected componentsFixes available
redhat/kernel<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/bpftool<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/bpftool-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-abi-stablelists<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-core<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-cross-headers<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug-core<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug-devel<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug-modules<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug-modules-extra<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-devel<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-doc<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-headers<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-modules<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-modules-extra<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-tools<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-tools-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-tools-libs<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/perf<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/perf-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/python3-perf<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/python3-perf-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/bpftool<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/bpftool-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-core<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-cross-headers<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug-core<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug-devel<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug-modules<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug-modules-extra<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debuginfo-common-s390x<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-devel<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-headers<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-modules<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-modules-extra<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-tools<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-tools-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-zfcpdump<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-zfcpdump-core<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-zfcpdump-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-zfcpdump-devel<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-zfcpdump-modules<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-zfcpdump-modules-extra<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/perf<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/perf-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/python3-perf<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/python3-perf-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/bpftool<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/bpftool-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-core<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-cross-headers<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug-core<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug-devel<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug-modules<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debug-modules-extra<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-debuginfo-common-ppc64le<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-devel<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-headers<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-modules<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-modules-extra<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-tools<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-tools-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-tools-libs<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/perf<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/perf-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/python3-perf<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/python3-perf-debuginfo<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/bpftool<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/bpftool-debuginfo<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-core<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-cross-headers<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-debug<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-debug-core<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-debug-debuginfo<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-debug-devel<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-debug-modules<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-debug-modules-extra<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-debuginfo<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-debuginfo-common-aarch64<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-devel<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-headers<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-modules<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-modules-extra<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-tools<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-tools-debuginfo<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-tools-libs<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/perf<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/perf-debuginfo<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/python3-perf<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/python3-perf-debuginfo<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
redhat/kernel-tools-libs-devel<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-tools-libs-devel<4.18.0-305.28.1.el8_4
4.18.0-305.28.1.el8_4
redhat/kernel-tools-libs-devel<4.18.0-305.28.1.el8_4.aa
4.18.0-305.28.1.el8_4.aa
Remediation
Event History
Feb 22, 2026
Advisory Published
via Red Hat·02:29 PM
Data Sourced
via Red Hat·02:29 PM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of RHSA-2021:4650?
The severity of RHSA-2021:4650 is considered moderate due to potential issues with user-supplied sizes and timer tree corruption.
2
How do I fix RHSA-2021:4650?
To fix RHSA-2021:4650, you should update your kernel and related packages to version 4.18.0-305.28.1.el8_4 or later.
3
What products are affected by RHSA-2021:4650?
Affected products include various Red Hat kernel packages, such as kernel, bpftool, and kernel-tools, among others.
4
What vulnerabilities are addressed in RHSA-2021:4650?
RHSA-2021:4650 addresses vulnerabilities related to insufficient validation of MSG_CRYPTO message sizes (CVE-2021-43267) and timer tree corruption issues.
5
When was RHSA-2021:4650 released?
RHSA-2021:4650 was released on December 1, 2021.