RHSA-2021:4798: Important: kpatch-patch security update
Published Nov 23, 2021
·Updated
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.<br>Security Fix(es):<br><li> kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free (CVE-2020-36385)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
50 affected componentsFixes available
redhat/kpatch-patch<3_10_0-1160_11_1-1-10.el7
3_10_0-1160_11_1-1-10.el7
redhat/kpatch-patch<3_10_0-1160_15_2-1-10.el7
3_10_0-1160_15_2-1-10.el7
redhat/kpatch-patch<3_10_0-1160_21_1-1-8.el7
3_10_0-1160_21_1-1-8.el7
redhat/kpatch-patch<3_10_0-1160_24_1-1-6.el7
3_10_0-1160_24_1-1-6.el7
redhat/kpatch-patch<3_10_0-1160_25_1-1-6.el7
3_10_0-1160_25_1-1-6.el7
redhat/kpatch-patch<3_10_0-1160_31_1-1-5.el7
3_10_0-1160_31_1-1-5.el7
redhat/kpatch-patch<3_10_0-1160_36_2-1-4.el7
3_10_0-1160_36_2-1-4.el7
redhat/kpatch-patch<3_10_0-1160_41_1-1-3.el7
3_10_0-1160_41_1-1-3.el7
redhat/kpatch-patch<3_10_0-1160_42_2-1-2.el7
3_10_0-1160_42_2-1-2.el7
redhat/kpatch-patch<3_10_0-1160_45_1-1-1.el7
3_10_0-1160_45_1-1-1.el7
redhat/kpatch-patch<3_10_0-1160_11_1-1-10.el7
3_10_0-1160_11_1-1-10.el7
redhat/kpatch-patch<3_10_0-1160_11_1-debuginfo-1-10.el7
3_10_0-1160_11_1-debuginfo-1-10.el7
redhat/kpatch-patch<3_10_0-1160_15_2-1-10.el7
3_10_0-1160_15_2-1-10.el7
redhat/kpatch-patch<3_10_0-1160_15_2-debuginfo-1-10.el7
3_10_0-1160_15_2-debuginfo-1-10.el7
redhat/kpatch-patch<3_10_0-1160_21_1-1-8.el7
3_10_0-1160_21_1-1-8.el7
redhat/kpatch-patch<3_10_0-1160_21_1-debuginfo-1-8.el7
3_10_0-1160_21_1-debuginfo-1-8.el7
redhat/kpatch-patch<3_10_0-1160_24_1-1-6.el7
3_10_0-1160_24_1-1-6.el7
redhat/kpatch-patch<3_10_0-1160_24_1-debuginfo-1-6.el7
3_10_0-1160_24_1-debuginfo-1-6.el7
redhat/kpatch-patch<3_10_0-1160_25_1-1-6.el7
3_10_0-1160_25_1-1-6.el7
redhat/kpatch-patch<3_10_0-1160_25_1-debuginfo-1-6.el7
3_10_0-1160_25_1-debuginfo-1-6.el7
redhat/kpatch-patch<3_10_0-1160_31_1-1-5.el7
3_10_0-1160_31_1-1-5.el7
redhat/kpatch-patch<3_10_0-1160_31_1-debuginfo-1-5.el7
3_10_0-1160_31_1-debuginfo-1-5.el7
redhat/kpatch-patch<3_10_0-1160_36_2-1-4.el7
3_10_0-1160_36_2-1-4.el7
redhat/kpatch-patch<3_10_0-1160_36_2-debuginfo-1-4.el7
3_10_0-1160_36_2-debuginfo-1-4.el7
redhat/kpatch-patch<3_10_0-1160_41_1-1-3.el7
3_10_0-1160_41_1-1-3.el7
redhat/kpatch-patch<3_10_0-1160_41_1-debuginfo-1-3.el7
3_10_0-1160_41_1-debuginfo-1-3.el7
redhat/kpatch-patch<3_10_0-1160_42_2-1-2.el7
3_10_0-1160_42_2-1-2.el7
redhat/kpatch-patch<3_10_0-1160_42_2-debuginfo-1-2.el7
3_10_0-1160_42_2-debuginfo-1-2.el7
redhat/kpatch-patch<3_10_0-1160_45_1-1-1.el7
3_10_0-1160_45_1-1-1.el7
redhat/kpatch-patch<3_10_0-1160_45_1-debuginfo-1-1.el7
3_10_0-1160_45_1-debuginfo-1-1.el7
redhat/kpatch-patch<3_10_0-1160_11_1-1-10.el7
3_10_0-1160_11_1-1-10.el7
redhat/kpatch-patch<3_10_0-1160_11_1-debuginfo-1-10.el7
3_10_0-1160_11_1-debuginfo-1-10.el7
redhat/kpatch-patch<3_10_0-1160_15_2-1-10.el7
3_10_0-1160_15_2-1-10.el7
redhat/kpatch-patch<3_10_0-1160_15_2-debuginfo-1-10.el7
3_10_0-1160_15_2-debuginfo-1-10.el7
redhat/kpatch-patch<3_10_0-1160_21_1-1-8.el7
3_10_0-1160_21_1-1-8.el7
redhat/kpatch-patch<3_10_0-1160_21_1-debuginfo-1-8.el7
3_10_0-1160_21_1-debuginfo-1-8.el7
redhat/kpatch-patch<3_10_0-1160_24_1-1-6.el7
3_10_0-1160_24_1-1-6.el7
redhat/kpatch-patch<3_10_0-1160_24_1-debuginfo-1-6.el7
3_10_0-1160_24_1-debuginfo-1-6.el7
redhat/kpatch-patch<3_10_0-1160_25_1-1-6.el7
3_10_0-1160_25_1-1-6.el7
redhat/kpatch-patch<3_10_0-1160_25_1-debuginfo-1-6.el7
3_10_0-1160_25_1-debuginfo-1-6.el7
redhat/kpatch-patch<3_10_0-1160_31_1-1-5.el7
3_10_0-1160_31_1-1-5.el7
redhat/kpatch-patch<3_10_0-1160_31_1-debuginfo-1-5.el7
3_10_0-1160_31_1-debuginfo-1-5.el7
redhat/kpatch-patch<3_10_0-1160_36_2-1-4.el7
3_10_0-1160_36_2-1-4.el7
redhat/kpatch-patch<3_10_0-1160_36_2-debuginfo-1-4.el7
3_10_0-1160_36_2-debuginfo-1-4.el7
redhat/kpatch-patch<3_10_0-1160_41_1-1-3.el7
3_10_0-1160_41_1-1-3.el7
redhat/kpatch-patch<3_10_0-1160_41_1-debuginfo-1-3.el7
3_10_0-1160_41_1-debuginfo-1-3.el7
redhat/kpatch-patch<3_10_0-1160_42_2-1-2.el7
3_10_0-1160_42_2-1-2.el7
redhat/kpatch-patch<3_10_0-1160_42_2-debuginfo-1-2.el7
3_10_0-1160_42_2-debuginfo-1-2.el7
redhat/kpatch-patch<3_10_0-1160_45_1-1-1.el7
3_10_0-1160_45_1-1-1.el7
redhat/kpatch-patch<3_10_0-1160_45_1-debuginfo-1-1.el7
3_10_0-1160_45_1-debuginfo-1-1.el7
Remediation
Event History
Jan 26, 2025
Advisory Published
via Red Hat·03:00 AM
Frequently Asked Questions
1
What is the severity of RHSA-2021:4798?
The severity of RHSA-2021:4798 is classified as important.
2
How do I fix RHSA-2021:4798?
You can fix RHSA-2021:4798 by updating the kpatch-patch package to the latest version available for your system.
3
What vulnerability does RHSA-2021:4798 address?
RHSA-2021:4798 addresses a use-after-free vulnerability in the Infiniband core driver, identified as CVE-2020-36385.
4
Is RHSA-2021:4798 applicable to all systems?
RHSA-2021:4798 specifically applies to systems running certain versions of the Red Hat kpatch-patch package.
5
When was RHSA-2021:4798 released?
RHSA-2021:4798 was released on December 15, 2021.