RLSA-2021:4646
RLSA-2021:4646 · Important: kernel-rt security and bug fix update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type (CVE-2021-43267) * kernel: timer tree corruption leads to missing wakeup and system freeze (CVE-2021-20317) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel-rt: update RT source tree to the Rocky Linux-8.5.z source tree (BZ#2020036)
CVSS 8.8 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-rt Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:4.18.0-348.2.1.rt7.132.el8_5
Update to 0:4.18.0-348.2.1.rt7.132.el8_5