Red Hat RHEL 7 Kernel Updates Fix Memory-Safety, SCSI Write and DNS Poisoning Flaws
Patch & Detection Intelligence · 50 sources · Updated 2mo ago · First seen Jun 9, 2021
Red Hat released Important kernel updates for RHEL 7 and RHEL for Real Time 7, delivering 3.10.0-1160.21.1.el7 and 3.10.0-1160.21.1.rt56.1158.el7 respectively. The advisories remediate 11 vulnerabilities, including arbitrary backing-store writes through the LIO SCSI target implementation (CVE-2020-28374), a Netfilter conntrack buffer overflow (CVE-2020-25211), virtual-terminal and pinctrl use-after-free information disclosures (CVE-2020-25656, CVE-2020-0427), and a local memory-exhaustion denial of service (CVE-2021-20265).
The fixes also address an ICMP rate-limiting weakness that can enable off-path UDP-port inference and DNS cache poisoning (CVE-2020-25705), as well as flaws reachable through malicious USB devices, including HID-driver out-of-bounds writes (CVE-2019-19532). Organizations operating affected RHEL 7, extended-support, virtualization-host, and real-time deployments should install the applicable kernel packages and reboot systems; where patching is delayed, restricting exposure to untrusted USB hardware, LIO exports, and unnecessary Netfilter conntrack-netlink access can reduce risk.
