ALSA-2021:4356 - Moderate: kernel security, bug fix, and enhancement update
Summary
ALSA-2021:4356: Moderate: kernel security, bug fix, and enhancement update. Affects kernel-tools-libs-devel versions < 4.18.0-348.el8. Fixed in 4.18.0-348.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel packages contain the Linux kernel, which serves as the core of any Linux operating system. It provides essential functionality and interfaces for various hardware devices, system processes, and user applications. The kernel is responsible for managing system resources, executing processes, and facilitating communication between software and hardware components. Due to its critical role, vulnerabilities in the kernel can have severe consequences, including unauthorized access, information disclosure, denial of service, and privilege escalation.
Vulnerability Detail
This vulnerability update addresses multiple security issues in the Linux kernel. These vulnerabilities range from out-of-bounds reads and writes to improper input validation and insufficient access control. Exploiting these vulnerabilities could lead to various security risks, such as arbitrary code execution, information disclosure, privilege escalation, and denial of service. The impacted areas include the pinctrl subsystem, Intel Ethernet E810 Adapter drivers, WiFi frame parsing, EAPOL forwarding, TKIP MIC verification, A-MSDU frame acceptance, and more. Additionally, there are vulnerabilities related to eBPF, Bluetooth subsystem, BlueZ, ndb_queue_rq(), mount overlayfs, and other kernel components.
How To Fix
Minimum fixed version
4.18.0-348.el8
This is the first release that contains the fix.
sudo dnf update kernel-tools-libs-develTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The kernel security update addresses multiple vulnerabilities that could lead to unauthorized access, information disclosure, denial of service, and privilege escalation. It is crucial to apply the provided update promptly to mitigate the risk of exploitation. Additionally, using Vulert's playground can help you check if your system is affected by this vulnerability and receive real-time alerts for open-source vulnerabilities in your software. For further support or assistance, feel free to reach out to DevNack.com.
See every vulnerability recorded for kernel-tools-libs-devel →
FAQ
These vulnerabilities can lead to unauthorized access, information disclosure, denial of service, and privilege escalation. Exploiting these vulnerabilities could allow an attacker to execute arbitrary code, gain elevated privileges, or cause system instability.
At the moment, there are no known workarounds for these vulnerabilities. It is recommended to apply the provided update to fix the vulnerabilities.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) to the playground, and it will provide real-time alerts for open-source vulnerabilities in your software.
Yes, you can find more detailed information about these vulnerabilities in the official advisory provided by the AlmaLinux team. The advisory includes CVE identifiers and links to the relevant sources for each vulnerability.
For further support or assistance with vulnerability remediation, you can reach out to info@devnack.com. Our team of experts will be happy to assist you in addressing and mitigating these vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-tools-libs-devel.
