RHSA-2021:3768: Important: kpatch-patch security update
Published Oct 12, 2021
·Updated
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.<br>Security Fix(es):<br><li> kernel: Improper handling of VMIO|VMPFNMAP vmas in KVM can bypass RO checks (CVE-2021-22543)</li> <li> kernel: powerpc: KVM guest OS users can cause host OS memory corruption (CVE-2021-37576)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
60 affected componentsFixes available
redhat/kpatch-patch<3_10_0-1160_11_1-1-9.el7
3_10_0-1160_11_1-1-9.el7
redhat/kpatch-patch<3_10_0-1160_15_2-1-9.el7
3_10_0-1160_15_2-1-9.el7
redhat/kpatch-patch<3_10_0-1160_21_1-1-7.el7
3_10_0-1160_21_1-1-7.el7
redhat/kpatch-patch<3_10_0-1160_24_1-1-5.el7
3_10_0-1160_24_1-1-5.el7
redhat/kpatch-patch<3_10_0-1160_25_1-1-5.el7
3_10_0-1160_25_1-1-5.el7
redhat/kpatch-patch<3_10_0-1160_2_1-1-10.el7
3_10_0-1160_2_1-1-10.el7
redhat/kpatch-patch<3_10_0-1160_2_2-1-10.el7
3_10_0-1160_2_2-1-10.el7
redhat/kpatch-patch<3_10_0-1160_31_1-1-4.el7
3_10_0-1160_31_1-1-4.el7
redhat/kpatch-patch<3_10_0-1160_36_2-1-3.el7
3_10_0-1160_36_2-1-3.el7
redhat/kpatch-patch<3_10_0-1160_41_1-1-2.el7
3_10_0-1160_41_1-1-2.el7
redhat/kpatch-patch<3_10_0-1160_42_2-1-1.el7
3_10_0-1160_42_2-1-1.el7
redhat/kpatch-patch<3_10_0-1160_6_1-1-10.el7
3_10_0-1160_6_1-1-10.el7
redhat/kpatch-patch<3_10_0-1160_11_1-1-9.el7
3_10_0-1160_11_1-1-9.el7
redhat/kpatch-patch<3_10_0-1160_11_1-debuginfo-1-9.el7
3_10_0-1160_11_1-debuginfo-1-9.el7
redhat/kpatch-patch<3_10_0-1160_15_2-1-9.el7
3_10_0-1160_15_2-1-9.el7
redhat/kpatch-patch<3_10_0-1160_15_2-debuginfo-1-9.el7
3_10_0-1160_15_2-debuginfo-1-9.el7
redhat/kpatch-patch<3_10_0-1160_21_1-1-7.el7
3_10_0-1160_21_1-1-7.el7
redhat/kpatch-patch<3_10_0-1160_21_1-debuginfo-1-7.el7
3_10_0-1160_21_1-debuginfo-1-7.el7
redhat/kpatch-patch<3_10_0-1160_24_1-1-5.el7
3_10_0-1160_24_1-1-5.el7
redhat/kpatch-patch<3_10_0-1160_24_1-debuginfo-1-5.el7
3_10_0-1160_24_1-debuginfo-1-5.el7
redhat/kpatch-patch<3_10_0-1160_25_1-1-5.el7
3_10_0-1160_25_1-1-5.el7
redhat/kpatch-patch<3_10_0-1160_25_1-debuginfo-1-5.el7
3_10_0-1160_25_1-debuginfo-1-5.el7
redhat/kpatch-patch<3_10_0-1160_2_1-1-10.el7
3_10_0-1160_2_1-1-10.el7
redhat/kpatch-patch<3_10_0-1160_2_1-debuginfo-1-10.el7
3_10_0-1160_2_1-debuginfo-1-10.el7
redhat/kpatch-patch<3_10_0-1160_2_2-1-10.el7
3_10_0-1160_2_2-1-10.el7
redhat/kpatch-patch<3_10_0-1160_2_2-debuginfo-1-10.el7
3_10_0-1160_2_2-debuginfo-1-10.el7
redhat/kpatch-patch<3_10_0-1160_31_1-1-4.el7
3_10_0-1160_31_1-1-4.el7
redhat/kpatch-patch<3_10_0-1160_31_1-debuginfo-1-4.el7
3_10_0-1160_31_1-debuginfo-1-4.el7
redhat/kpatch-patch<3_10_0-1160_36_2-1-3.el7
3_10_0-1160_36_2-1-3.el7
redhat/kpatch-patch<3_10_0-1160_36_2-debuginfo-1-3.el7
3_10_0-1160_36_2-debuginfo-1-3.el7
redhat/kpatch-patch<3_10_0-1160_41_1-1-2.el7
3_10_0-1160_41_1-1-2.el7
redhat/kpatch-patch<3_10_0-1160_41_1-debuginfo-1-2.el7
3_10_0-1160_41_1-debuginfo-1-2.el7
redhat/kpatch-patch<3_10_0-1160_42_2-1-1.el7
3_10_0-1160_42_2-1-1.el7
redhat/kpatch-patch<3_10_0-1160_42_2-debuginfo-1-1.el7
3_10_0-1160_42_2-debuginfo-1-1.el7
redhat/kpatch-patch<3_10_0-1160_6_1-1-10.el7
3_10_0-1160_6_1-1-10.el7
redhat/kpatch-patch<3_10_0-1160_6_1-debuginfo-1-10.el7
3_10_0-1160_6_1-debuginfo-1-10.el7
redhat/kpatch-patch<3_10_0-1160_11_1-1-9.el7
3_10_0-1160_11_1-1-9.el7
redhat/kpatch-patch<3_10_0-1160_11_1-debuginfo-1-9.el7
3_10_0-1160_11_1-debuginfo-1-9.el7
redhat/kpatch-patch<3_10_0-1160_15_2-1-9.el7
3_10_0-1160_15_2-1-9.el7
redhat/kpatch-patch<3_10_0-1160_15_2-debuginfo-1-9.el7
3_10_0-1160_15_2-debuginfo-1-9.el7
redhat/kpatch-patch<3_10_0-1160_21_1-1-7.el7
3_10_0-1160_21_1-1-7.el7
redhat/kpatch-patch<3_10_0-1160_21_1-debuginfo-1-7.el7
3_10_0-1160_21_1-debuginfo-1-7.el7
redhat/kpatch-patch<3_10_0-1160_24_1-1-5.el7
3_10_0-1160_24_1-1-5.el7
redhat/kpatch-patch<3_10_0-1160_24_1-debuginfo-1-5.el7
3_10_0-1160_24_1-debuginfo-1-5.el7
redhat/kpatch-patch<3_10_0-1160_25_1-1-5.el7
3_10_0-1160_25_1-1-5.el7
redhat/kpatch-patch<3_10_0-1160_25_1-debuginfo-1-5.el7
3_10_0-1160_25_1-debuginfo-1-5.el7
redhat/kpatch-patch<3_10_0-1160_2_1-1-10.el7
3_10_0-1160_2_1-1-10.el7
redhat/kpatch-patch<3_10_0-1160_2_1-debuginfo-1-10.el7
3_10_0-1160_2_1-debuginfo-1-10.el7
redhat/kpatch-patch<3_10_0-1160_2_2-1-10.el7
3_10_0-1160_2_2-1-10.el7
redhat/kpatch-patch<3_10_0-1160_2_2-debuginfo-1-10.el7
3_10_0-1160_2_2-debuginfo-1-10.el7
redhat/kpatch-patch<3_10_0-1160_31_1-1-4.el7
3_10_0-1160_31_1-1-4.el7
redhat/kpatch-patch<3_10_0-1160_31_1-debuginfo-1-4.el7
3_10_0-1160_31_1-debuginfo-1-4.el7
redhat/kpatch-patch<3_10_0-1160_36_2-1-3.el7
3_10_0-1160_36_2-1-3.el7
redhat/kpatch-patch<3_10_0-1160_36_2-debuginfo-1-3.el7
3_10_0-1160_36_2-debuginfo-1-3.el7
redhat/kpatch-patch<3_10_0-1160_41_1-1-2.el7
3_10_0-1160_41_1-1-2.el7
redhat/kpatch-patch<3_10_0-1160_41_1-debuginfo-1-2.el7
3_10_0-1160_41_1-debuginfo-1-2.el7
redhat/kpatch-patch<3_10_0-1160_42_2-1-1.el7
3_10_0-1160_42_2-1-1.el7
redhat/kpatch-patch<3_10_0-1160_42_2-debuginfo-1-1.el7
3_10_0-1160_42_2-debuginfo-1-1.el7
redhat/kpatch-patch<3_10_0-1160_6_1-1-10.el7
3_10_0-1160_6_1-1-10.el7
redhat/kpatch-patch<3_10_0-1160_6_1-debuginfo-1-10.el7
3_10_0-1160_6_1-debuginfo-1-10.el7
Remediation
Event History
Jun 20, 2024
Advisory Published
via Red Hat·01:32 AM
Frequently Asked Questions
1
What is the severity of RHSA-2021:3768?
The severity of RHSA-2021:3768 is classified as moderate.
2
How do I fix RHSA-2021:3768?
To fix RHSA-2021:3768, you need to apply the updates provided in the kpatch-patch package corresponding to your system's version.
3
What vulnerabilities does RHSA-2021:3768 address?
RHSA-2021:3768 addresses the CVE-2021-22543 vulnerability related to improper handling of VM_IO|VM_PFNMAP vmas in KVM.
4
Which software versions are affected by RHSA-2021:3768?
RHSA-2021:3768 affects several versions of the kpatch-patch package, including 3_10_0-1160_11_1-1-9.el7 and others up to 3_10_0-1160_42_2-1-1.el7.
5
What does the RHSA-2021:3768 advisory recommend?
The RHSA-2021:3768 advisory recommends updating the kpatch-patch package to the latest version to mitigate the identified security vulnerabilities.