Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

Red Hat Enterprise Linux 7 RHSA-2021-3441-01 Moderate Use-After-Free Fix

red hat
Calendar Grey September 7, 2021
Dist Redhat Esm H88
New patch rolled out for Red Hat Enterprise Linux 7 classified as moderate, addressing a use-after-free vulnerability within the kernel.
An update is now available for Red Hat Enterprise Linux 7

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Summary

This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.
Security Fix(es):
* kernel: use-after-free in route4_change() in net/sched/cls_route.c (CVE-2021-3715)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat Enterprise Linux moderate severity patch update kernel issue use-after-free kpatch-patch

References

https://access.redhat.com/security/cve/CVE-2021-3715 https://access.redhat.com/security/updates/classification/#moderate

Package List

Red Hat Enterprise Linux Server (v. 7):
Source: kpatch-patch-3_10_0-1160-1-9.el7.src.rpm kpatch-patch-3_10_0-1160_11_1-1-8.el7.src.rpm kpatch-patch-3_10_0-1160_15_2-1-8.el7.src.rpm kpatch-patch-3_10_0-1160_21_1-1-6.el7.src.rpm kpatch-patch-3_10_0-1160_24_1-1-4.el7.src.rpm kpatch-patch-3_10_0-1160_25_1-1-4.el7.src.rpm kpatch-patch-3_10_0-1160_2_1-1-9.el7.src.rpm kpatch-patch-3_10_0-1160_2_2-1-9.el7.src.rpm kpatch-patch-3_10_0-1160_31_1-1-3.el7.src.rpm kpatch-patch-3_10_0-1160_36_2-1-2.el7.src.rpm kpatch-patch-3_10_0-1160_41_1-1-1.el7.src.rpm kpatch-patch-3_10_0-1160_6_1-1-9.el7.src.rpm
ppc64le: kpatch-patch-3_10_0-1160-1-9.el7.ppc64le.rpm kpatch-patch-3_10_0-1160-debuginfo-1-9.el7.ppc64le.rpm kpatch-patch-3_10_0-1160_11_1-1-8.el7.ppc64le.rpm kpatch-patch-3_10_0-1160_11_1-debuginfo-1-8.el7.ppc64le.rpm kpatch-patch-3_10_0-1160_15_2-1-8.el7.ppc64le.rpm kpatch-patch-3_10_0-1160_15_2-debuginfo-1-8.el7.ppc64le.rpm kpatch-patch-3_10_0-1160_21_1-1-6.el7.ppc64le.rpm kpatch-patch-3_10_0-1160_21_1-debuginfo-1-6.el7.ppc64le.rpm kpatch-patch-3_10_0-1160_24_1-1-4.el7.ppc64le.rpm kpatch-patch-3_10_0-1160_24_1-debuginfo-1-4.el7.ppc64le.rpm kpatch-patch-3_10_0-1160_25_1-1-4.el7.ppc64le.rpm kpatch-patch-3_10_0-1160_25_1-debuginfo-1-4.el7.ppc64le.rpm

Read the Full Advisory


Advisory ID: RHSA-2021:3441-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2021:3441
Issue date: 2021-09-07

Topic

An update is now available for Red Hat Enterprise Linux 7.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat Enterprise Linux moderate severity patch update kernel issue use-after-free kpatch-patch

Relevant Releases Architectures

Red Hat Enterprise Linux Server (v. 7) - ppc64le, x86_64

Bugs Fixed

1993988 - CVE-2021-3715 kernel: use-after-free in route4_change() in net/sched/cls_route.c

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here