[RHSA-2021:3057] kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
kernel: race condition in net/can/bcm.c leads to local privilege escalation (CVE-2021-3609)
kernel: Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks (CVE-2021-22543)
kernel: out-of-bounds write in xt_compat_target_from_user() in net/netfilter/x_tables.c (CVE-2021-22555)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
Urgent: Missing dptf_power.ko module in RHEL8 (BZ#1968381)
[mlx5] kdump over NFS fails: mlx5 driver gives error "Stop room 95 is bigger than the SQ size 64" (BZ#1969909)
BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 in bluetooth hci_error_reset on intel-tigerlake-h01 (BZ#1972564)
Update CIFS to kernel 5.10 (BZ#1973637)
Backport "tick/nohz: Conditionally restart tick on idle exit" to RHEL 8.5 (BZ#1978710)
Significant performance drop starting on kernel-4.18.0-277 visible on mmap benchmark (BZ#1980314)
Inaccessible NFS server overloads clients (native_queued_spin_lock_slowpath connotation?) (BZ#1980613)
[RHEL8.4 BUG],RialtoMLK, I915 graphic driver failed to boot with one new 120HZ panel (BZ#1981250)
act_ct: subject to DNAT tuple collision (BZ#1982494)
Enhancement(s):
- [Lenovo 8.5 FEAT] drivers/nvme - Update to the latest upstream (BZ#1965415)
- ID
- RHSA-2021:3057
- Severity
- important
- URL
- https://access.redhat.com/errata/RHSA-2021:3057
- Published
-
2021-08-10T00:00:00
(3 years ago) - Modified
-
2021-08-10T00:00:00
(3 years ago) - Rights
- Copyright 2021 Red Hat, Inc.
- Other Advisories
-
- ALAS-2021-1539
- ALAS2-2021-1627
- ALAS2-2021-1699
- ALSA-2021:3057
- ASA-202107-48
- ASA-202107-49
- ASA-202107-50
- ASA-202107-51
- DSA-4941-1
- ELSA-2021-3057
- ELSA-2021-3327
- ELSA-2021-3801
- ELSA-2021-9395
- ELSA-2021-9442
- ELSA-2021-9450
- ELSA-2021-9451
- ELSA-2021-9452
- ELSA-2021-9453
- FEDORA-2021-95f2f1cfc7
- FEDORA-2021-fe826f202e
- MS:CVE-2021-3609
- openSUSE-SU-2021:1076-1
- openSUSE-SU-2021:1142-1
- openSUSE-SU-2021:2409-1
- openSUSE-SU-2021:2415-1
- openSUSE-SU-2021:2427-1
- openSUSE-SU-2021:2645-1
- openSUSE-SU-2021:2687-1
- openSUSE-SU-2021:3876-1
- RHSA-2021:3044
- RHSA-2021:3088
- RHSA-2021:3327
- RHSA-2021:3328
- RHSA-2021:3381
- RHSA-2021:3768
- RHSA-2021:3801
- RHSA-2021:3802
- RLSA-2021:3057
- SSA:2021-202-01
- SUSE-SU-2021:2406-1
- SUSE-SU-2021:2407-1
- SUSE-SU-2021:2408-1
- SUSE-SU-2021:2409-1
- SUSE-SU-2021:2415-1
- SUSE-SU-2021:2416-1
- SUSE-SU-2021:2421-1
- SUSE-SU-2021:2422-1
- SUSE-SU-2021:2427-1
- SUSE-SU-2021:2438-1
- SUSE-SU-2021:2451-1
- SUSE-SU-2021:2487-1
- SUSE-SU-2021:2538-1
- SUSE-SU-2021:2542-1
- SUSE-SU-2021:2559-1
- SUSE-SU-2021:2560-1
- SUSE-SU-2021:2577-1
- SUSE-SU-2021:2584-1
- SUSE-SU-2021:2599-1
- SUSE-SU-2021:2599-2
- SUSE-SU-2021:2643-1
- SUSE-SU-2021:2644-1
- SUSE-SU-2021:2645-1
- SUSE-SU-2021:2646-1
- SUSE-SU-2021:2647-1
- SUSE-SU-2021:2678-1
- SUSE-SU-2021:2687-1
- SUSE-SU-2021:2695-1
- SUSE-SU-2021:2746-1
- SUSE-SU-2021:2756-1
- SUSE-SU-2021:2842-1
- SUSE-SU-2021:3876-1
- SUSE-SU-2021:3969-1
- SUSE-SU-2021:3972-1
- USN-4997-1
- USN-4997-2
- USN-4999-1
- USN-5000-1
- USN-5000-2
- USN-5001-1
- USN-5002-1
- USN-5003-1
- USN-5039-1
- USN-5070-1
- USN-5071-1
- USN-5071-2
- USN-5071-3
- USN-5082-1
- USN-5094-1
- USN-5094-2
- USN-5106-1
- USN-5120-1
- USN-5505-1
- USN-5513-1
Source | # ID | Name | URL |
---|---|---|---|
Bugzilla | 1965461 | https://bugzilla.redhat.com/1965461 | |
Bugzilla | 1971651 | https://bugzilla.redhat.com/1971651 | |
Bugzilla | 1980101 | https://bugzilla.redhat.com/1980101 | |
RHSA | RHSA-2021:3057 | https://access.redhat.com/errata/RHSA-2021:3057 | |
CVE | CVE-2021-22543 | https://access.redhat.com/security/cve/CVE-2021-22543 | |
CVE | CVE-2021-22555 | https://access.redhat.com/security/cve/CVE-2021-22555 | |
CVE | CVE-2021-3609 | https://access.redhat.com/security/cve/CVE-2021-3609 |
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:rpm/redhat/python3-perf?arch=x86_64&distro=redhat-8.4 | redhat | python3-perf | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/python3-perf?arch=s390x&distro=redhat-8.4 | redhat | python3-perf | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/python3-perf?arch=ppc64le&distro=redhat-8.4 | redhat | python3-perf | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/python3-perf?arch=aarch64&distro=redhat-8.4 | redhat | python3-perf | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/perf?arch=x86_64&distro=redhat-8.4 | redhat | perf | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/perf?arch=s390x&distro=redhat-8.4 | redhat | perf | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/perf?arch=ppc64le&distro=redhat-8.4 | redhat | perf | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/perf?arch=aarch64&distro=redhat-8.4 | redhat | perf | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel?arch=x86_64&distro=redhat-8.4 | redhat | kernel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/kernel?arch=s390x&distro=redhat-8.4 | redhat | kernel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel?arch=ppc64le&distro=redhat-8.4 | redhat | kernel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/kernel?arch=aarch64&distro=redhat-8.4 | redhat | kernel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel-zfcpdump?arch=s390x&distro=redhat-8.4 | redhat | kernel-zfcpdump | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-zfcpdump-modules?arch=s390x&distro=redhat-8.4 | redhat | kernel-zfcpdump-modules | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-zfcpdump-modules-extra?arch=s390x&distro=redhat-8.4 | redhat | kernel-zfcpdump-modules-extra | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-zfcpdump-devel?arch=s390x&distro=redhat-8.4 | redhat | kernel-zfcpdump-devel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-zfcpdump-core?arch=s390x&distro=redhat-8.4 | redhat | kernel-zfcpdump-core | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-tools?arch=x86_64&distro=redhat-8.4 | redhat | kernel-tools | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/kernel-tools?arch=s390x&distro=redhat-8.4 | redhat | kernel-tools | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-tools?arch=ppc64le&distro=redhat-8.4 | redhat | kernel-tools | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/kernel-tools?arch=aarch64&distro=redhat-8.4 | redhat | kernel-tools | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel-tools-libs?arch=x86_64&distro=redhat-8.4 | redhat | kernel-tools-libs | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/kernel-tools-libs?arch=ppc64le&distro=redhat-8.4 | redhat | kernel-tools-libs | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/kernel-tools-libs?arch=aarch64&distro=redhat-8.4 | redhat | kernel-tools-libs | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel-tools-libs-devel?arch=x86_64&distro=redhat-8.4 | redhat | kernel-tools-libs-devel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/kernel-tools-libs-devel?arch=ppc64le&distro=redhat-8.4 | redhat | kernel-tools-libs-devel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/kernel-tools-libs-devel?arch=aarch64&distro=redhat-8.4 | redhat | kernel-tools-libs-devel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel-modules?arch=x86_64&distro=redhat-8.4 | redhat | kernel-modules | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/kernel-modules?arch=s390x&distro=redhat-8.4 | redhat | kernel-modules | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-modules?arch=ppc64le&distro=redhat-8.4 | redhat | kernel-modules | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/kernel-modules?arch=aarch64&distro=redhat-8.4 | redhat | kernel-modules | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel-modules-extra?arch=x86_64&distro=redhat-8.4 | redhat | kernel-modules-extra | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/kernel-modules-extra?arch=s390x&distro=redhat-8.4 | redhat | kernel-modules-extra | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-modules-extra?arch=ppc64le&distro=redhat-8.4 | redhat | kernel-modules-extra | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/kernel-modules-extra?arch=aarch64&distro=redhat-8.4 | redhat | kernel-modules-extra | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel-headers?arch=x86_64&distro=redhat-8.4 | redhat | kernel-headers | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/kernel-headers?arch=s390x&distro=redhat-8.4 | redhat | kernel-headers | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-headers?arch=ppc64le&distro=redhat-8.4 | redhat | kernel-headers | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/kernel-headers?arch=aarch64&distro=redhat-8.4 | redhat | kernel-headers | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel-doc?distro=redhat-8.4 | redhat | kernel-doc | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ||
Affected | pkg:rpm/redhat/kernel-devel?arch=x86_64&distro=redhat-8.4 | redhat | kernel-devel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/kernel-devel?arch=s390x&distro=redhat-8.4 | redhat | kernel-devel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-devel?arch=ppc64le&distro=redhat-8.4 | redhat | kernel-devel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/kernel-devel?arch=aarch64&distro=redhat-8.4 | redhat | kernel-devel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel-debug?arch=x86_64&distro=redhat-8.4 | redhat | kernel-debug | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/kernel-debug?arch=s390x&distro=redhat-8.4 | redhat | kernel-debug | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-debug?arch=ppc64le&distro=redhat-8.4 | redhat | kernel-debug | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/kernel-debug?arch=aarch64&distro=redhat-8.4 | redhat | kernel-debug | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel-debug-modules?arch=x86_64&distro=redhat-8.4 | redhat | kernel-debug-modules | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/kernel-debug-modules?arch=s390x&distro=redhat-8.4 | redhat | kernel-debug-modules | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-debug-modules?arch=ppc64le&distro=redhat-8.4 | redhat | kernel-debug-modules | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/kernel-debug-modules?arch=aarch64&distro=redhat-8.4 | redhat | kernel-debug-modules | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel-debug-modules-extra?arch=x86_64&distro=redhat-8.4 | redhat | kernel-debug-modules-extra | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/kernel-debug-modules-extra?arch=s390x&distro=redhat-8.4 | redhat | kernel-debug-modules-extra | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-debug-modules-extra?arch=ppc64le&distro=redhat-8.4 | redhat | kernel-debug-modules-extra | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/kernel-debug-modules-extra?arch=aarch64&distro=redhat-8.4 | redhat | kernel-debug-modules-extra | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel-debug-devel?arch=x86_64&distro=redhat-8.4 | redhat | kernel-debug-devel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/kernel-debug-devel?arch=s390x&distro=redhat-8.4 | redhat | kernel-debug-devel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-debug-devel?arch=ppc64le&distro=redhat-8.4 | redhat | kernel-debug-devel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/kernel-debug-devel?arch=aarch64&distro=redhat-8.4 | redhat | kernel-debug-devel | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel-debug-core?arch=x86_64&distro=redhat-8.4 | redhat | kernel-debug-core | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/kernel-debug-core?arch=s390x&distro=redhat-8.4 | redhat | kernel-debug-core | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-debug-core?arch=ppc64le&distro=redhat-8.4 | redhat | kernel-debug-core | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/kernel-debug-core?arch=aarch64&distro=redhat-8.4 | redhat | kernel-debug-core | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel-cross-headers?arch=x86_64&distro=redhat-8.4 | redhat | kernel-cross-headers | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/kernel-cross-headers?arch=s390x&distro=redhat-8.4 | redhat | kernel-cross-headers | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-cross-headers?arch=ppc64le&distro=redhat-8.4 | redhat | kernel-cross-headers | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/kernel-cross-headers?arch=aarch64&distro=redhat-8.4 | redhat | kernel-cross-headers | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel-core?arch=x86_64&distro=redhat-8.4 | redhat | kernel-core | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/kernel-core?arch=s390x&distro=redhat-8.4 | redhat | kernel-core | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/kernel-core?arch=ppc64le&distro=redhat-8.4 | redhat | kernel-core | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/kernel-core?arch=aarch64&distro=redhat-8.4 | redhat | kernel-core | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 | |
Affected | pkg:rpm/redhat/kernel-abi-stablelists?distro=redhat-8.4 | redhat | kernel-abi-stablelists | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ||
Affected | pkg:rpm/redhat/bpftool?arch=x86_64&distro=redhat-8.4 | redhat | bpftool | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | x86_64 | |
Affected | pkg:rpm/redhat/bpftool?arch=s390x&distro=redhat-8.4 | redhat | bpftool | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | s390x | |
Affected | pkg:rpm/redhat/bpftool?arch=ppc64le&distro=redhat-8.4 | redhat | bpftool | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | ppc64le | |
Affected | pkg:rpm/redhat/bpftool?arch=aarch64&distro=redhat-8.4 | redhat | bpftool | < 4.18.0-305.12.1.el8_4 | redhat-8.4 | aarch64 |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |