Important: Kernel Security and Bug Fix Update for kernel-tools-libs-devel
Summary
ALSA-2021:2714: Important: kernel security and bug fix update. Affects kernel-tools-libs-devel versions < 4.18.0-305.10.2.el8_4. Fixed in 4.18.0-305.10.2.el8_4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel packages contain the Linux kernel, which serves as the core of any Linux operating system. It provides essential functionality for the system, including device drivers, process management, memory management, and file system support. The kernel-tools-libs-devel package is specifically designed for kernel development and includes libraries and headers necessary for building kernel modules and tools.
Vulnerability Detail
This update addresses multiple security vulnerabilities and bug fixes in the kernel. The vulnerabilities include:
- CVE-2021-33909: A size_t-to-int conversion vulnerability in the filesystem layer.
- CVE-2021-32399: A race condition for removal of the HCI controller.
These vulnerabilities could potentially allow an attacker to execute arbitrary code, escalate privileges, or cause a denial-of-service condition. The impact and severity of these vulnerabilities vary depending on the specific use case and system configuration.
How To Fix
Minimum fixed version
4.18.0-305.10.2.el8_4
This is the first release that contains the fix.
sudo dnf update kernel-tools-libs-develTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
This update addresses important security vulnerabilities and bug fixes in the kernel-tools-libs-devel package. It is strongly advised to update to the latest version to mitigate the risks associated with these vulnerabilities. If you need further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for kernel-tools-libs-devel →
FAQ
The kernel-tools-libs-devel package provides libraries and headers necessary for building kernel modules and tools. It is primarily used for kernel development and debugging purposes.
CVE-2021-33909 is a size_t-to-int conversion vulnerability in the filesystem layer of the Linux kernel. It could potentially allow an attacker to execute arbitrary code or escalate privileges.
CVE-2021-32399 is a race condition vulnerability related to the removal of the HCI controller in the Linux kernel. Exploiting this vulnerability could lead to a denial-of-service condition or other security impacts.
You can update the kernel-tools-libs-devel package by using the package manager of your Linux distribution or by manually downloading and installing the updated package from the official repository.
Yes, it is recommended to reboot the system after updating the kernel to ensure the new version is loaded and all changes take effect.
References
Related vulnerabilities
Recent vulnerabilities recorded for kernel-tools-libs-devel.
