RHSA-2021:4687: Important: kernel security update
Published Nov 16, 2021
·Updated
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free (CVE-2020-36385) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
105 affected componentsFixes available
redhat/kernel<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/bpftool<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/bpftool-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-abi-whitelists<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-core<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-cross-headers<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug-core<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug-devel<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug-modules<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug-modules-extra<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-devel<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-doc<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-headers<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-modules<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-modules-extra<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-tools<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-tools-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-tools-libs<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/perf<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/perf-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/python3-perf<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/python3-perf-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/bpftool<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/bpftool-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-core<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-cross-headers<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug-core<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug-devel<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug-modules<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug-modules-extra<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debuginfo-common-s390x<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-devel<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-headers<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-modules<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-modules-extra<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-tools<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-tools-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-zfcpdump<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-zfcpdump-core<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-zfcpdump-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-zfcpdump-devel<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-zfcpdump-modules<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-zfcpdump-modules-extra<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/perf<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/perf-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/python3-perf<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/python3-perf-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/bpftool<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/bpftool-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-core<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-cross-headers<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug-core<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug-devel<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug-modules<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debug-modules-extra<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-debuginfo-common-ppc64le<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-devel<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-headers<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-modules<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-modules-extra<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-tools<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-tools-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-tools-libs<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/perf<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/perf-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/python3-perf<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/python3-perf-debuginfo<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/bpftool<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/bpftool-debuginfo<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-core<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-cross-headers<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-debug<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-debug-core<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-debug-debuginfo<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-debug-devel<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-debug-modules<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-debug-modules-extra<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-debuginfo<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-debuginfo-common-aarch64<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-devel<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-headers<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-modules<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-modules-extra<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-tools<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-tools-debuginfo<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-tools-libs<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/perf<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/perf-debuginfo<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/python3-perf<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/python3-perf-debuginfo<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
redhat/kernel-tools-libs-devel<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-tools-libs-devel<4.18.0-147.57.1.el8_1
4.18.0-147.57.1.el8_1
redhat/kernel-tools-libs-devel<4.18.0-147.57.1.el8_1.aa
4.18.0-147.57.1.el8_1.aa
Remediation
Event History
Nov 16, 2021
Advisory Published
via Red Hat·12:00 AM
Frequently Asked Questions
1
What is the severity of RHSA-2021:4687?
The severity of RHSA-2021:4687 is classified as important.
2
How do I fix RHSA-2021:4687?
To fix RHSA-2021:4687, update the kernel packages to version 4.18.0-147.57.1.el8_1 or later.
3
What vulnerability does RHSA-2021:4687 address?
RHSA-2021:4687 addresses a use-after-free vulnerability in the Linux kernel related to drivers/infiniband/core/ucma.c.
4
Which systems are affected by RHSA-2021:4687?
RHSA-2021:4687 affects systems running the specified versions of Red Hat kernel packages.
5
Is a system reboot required after applying the fix for RHSA-2021:4687?
Yes, a system reboot is typically required to fully apply the kernel updates associated with RHSA-2021:4687.