RHSA-2021:4777: Important: kernel security and bug fix update
The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free (CVE-2020-36385)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> scsi: ibmvfc: Avoid link down on FS9100 canister reboot (BZ#1882627)</li> <li> crash in qla2x00statusentry() because of corrupt srb (BZ#1899599)</li> <li> qedf driver: race condition between qedf's completion work task and another work item tearing down an fcport with qedfcleanupfcport (BZ#1941766)</li> <li> The kernel crashes in hvpciremoveslots() upon hv device removal. A possible race between hvpciremoveslots() and pcidevicespresentwork(). (BZ#1948961)</li> <li> I/O delays incorrectly handled in the NVMe stack (BZ#1981610)</li> <li> Data corruption in NFS client reusing slotid/seqid due to an interrupted slot (BZ#2007465)</li>
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for the Linux kernel issue regarding a use-after-free in ctx?
The vulnerability ID for the Linux kernel issue regarding a use-after-free in ctx is RHSA-2021:4777.
What are the potential impacts of RHSA-2021:4777 on system security?
The potential impacts of RHSA-2021:4777 include unauthorized access and execution of arbitrary code due to the use-after-free vulnerability.
How do I mitigate the risks associated with RHSA-2021:4777?
To mitigate the risks associated with RHSA-2021:4777, you should update the affected kernel packages to version 3.10.0-1160.49.1.el7 or higher.
Which packages are affected by RHSA-2021:4777?
The affected packages by RHSA-2021:4777 include kernel, bpftool, kernel-debug, and several others specified in the advisory.
Is RHSA-2021:4777 part of a larger security issue?
Yes, RHSA-2021:4777 is part of a broader set of security vulnerabilities impacting the Linux kernel's stability and security.