6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
32.3%
An update is available for kernel.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan (CVE-2021-33034)
kernel: security bypass in certs/blacklist.c and certs/system_keyring.c (CVE-2020-26541)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
[ESXi][Rocky Linux-8] VMXNET3 v4 causes invalid checksums of inner packets of VXLAN tunnel (BZ#1960702)
fnic crash from invalid request pointer (BZ#1961705)
GFS2: Failed FS thaw call makes the entire snapshot failed. (BZ#1961849)
dm writecache: fix performance degradation in ssd mode (BZ#1962241)
Kernel BUG with act_ct and IP fragments (BZ#1963940)
core: backports from upstream (BZ#1963952)
Hibernate resume on Rocky Linux fails in Amazon EC2 C5.18xlarge instance (BZ#1964930)
[SanityOnly] panic caused by i40e_msix_clean_rings (BZ#1964962)
tc reclassification limit is too low for OVN (BZ#1965148)
tc action ct nat src addr does not work while used with ct nat dst addr together (BZ#1965150)
CNB: Rebase/update TC subsystem for Rocky Linux 8.5 (BZ#1965457)
sctp: crash due to use after free of sctp_transport structure (BZ#1965632)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
rocky | 8 | aarch64 | bpftool | < 4.18.0-305.7.1.el8_4 | bpftool-0:4.18.0-305.7.1.el8_4.aarch64.rpm |
rocky | 8 | x86_64 | bpftool | < 4.18.0-305.7.1.el8_4 | bpftool-0:4.18.0-305.7.1.el8_4.x86_64.rpm |
rocky | 8 | aarch64 | bpftool-debuginfo | < 4.18.0-305.7.1.el8_4 | bpftool-debuginfo-0:4.18.0-305.7.1.el8_4.aarch64.rpm |
rocky | 8 | x86_64 | bpftool-debuginfo | < 4.18.0-305.7.1.el8_4 | bpftool-debuginfo-0:4.18.0-305.7.1.el8_4.x86_64.rpm |
rocky | 8 | aarch64 | kernel | < 4.18.0-305.7.1.el8_4 | kernel-0:4.18.0-305.7.1.el8_4.aarch64.rpm |
rocky | 8 | x86_64 | kernel | < 4.18.0-305.7.1.el8_4 | kernel-0:4.18.0-305.7.1.el8_4.x86_64.rpm |
rocky | 8 | noarch | kernel-abi-stablelists | < 4.18.0-305.7.1.el8_4 | kernel-abi-stablelists-0:4.18.0-305.7.1.el8_4.noarch.rpm |
rocky | 8 | aarch64 | kernel-core | < 4.18.0-305.7.1.el8_4 | kernel-core-0:4.18.0-305.7.1.el8_4.aarch64.rpm |
rocky | 8 | x86_64 | kernel-core | < 4.18.0-305.7.1.el8_4 | kernel-core-0:4.18.0-305.7.1.el8_4.x86_64.rpm |
rocky | 8 | aarch64 | kernel-cross-headers | < 4.18.0-305.7.1.el8_4 | kernel-cross-headers-0:4.18.0-305.7.1.el8_4.aarch64.rpm |
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
32.3%