RHSA-2021:3044: Important: kpatch-patch security update
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.Security Fix(es): kernel: race condition in net/can/bcm.c leads to local privilege escalation (CVE-2021-3609) kernel: Improper handling of VMIO|VMPFNMAP vmas in KVM can bypass RO checks (CVE-2021-22543) kernel: out-of-bounds write in xtcompattargetfromuser() in net/netfilter/xtables.c (CVE-2021-22555) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:3044?
The severity of RHSA-2021:3044 is critical due to the privilege escalation risk associated with the vulnerability.
How do I fix RHSA-2021:3044?
To fix RHSA-2021:3044, you should update the kpatch-patch package to the remedied versions provided in the advisory.
What vulnerability does RHSA-2021:3044 address?
RHSA-2021:3044 addresses a race condition vulnerability in the kernel that could lead to local privilege escalation (CVE-2021-3609).
Which systems are affected by RHSA-2021:3044?
RHSA-2021:3044 affects Red Hat Enterprise Linux 8 systems running specific versions of the kpatch-patch package.
Is there a workaround for RHSA-2021:3044?
There is no official workaround for RHSA-2021:3044; applying the recommended updates is necessary to mitigate the vulnerability.