vulnerability
Oracle Linux: CVE-2021-27364: ELSA-2021-9175: Unbreakable Enterprise kernel-container security update (IMPORTANT) (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:L/AC:L/Au:S/C:C/I:N/A:C) | 2021-03-05 | 2021-03-18 | 2025-01-23 |
Severity
6
CVSS
(AV:L/AC:L/Au:S/C:C/I:N/A:C)
Published
2021-03-05
Added
2021-03-18
Modified
2025-01-23
Description
An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.
A flaw was found in the Linux kernel. An out-of-bounds read was discovered in the libiscsi module that could lead to reading kernel memory or a crash. The highest threat from this vulnerability is to data confidentiality as well as system availability.
A flaw was found in the Linux kernel. An out-of-bounds read was discovered in the libiscsi module that could lead to reading kernel memory or a crash. The highest threat from this vulnerability is to data confidentiality as well as system availability.
Solution(s)
oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek
References
- CVE-2021-27364
- https://attackerkb.com/topics/CVE-2021-27364
- ELSA-ELSA-2021-9175
- ELSA-ELSA-2021-1093
- ELSA-ELSA-2021-1071
- ELSA-ELSA-2021-9164
- ELSA-ELSA-2021-9141
- ELSA-ELSA-2021-9140
- ELSA-ELSA-2021-9116
- ELSA-ELSA-2021-9113
- ELSA-ELSA-2021-9212
- ELSA-ELSA-2021-9114
- ELSA-ELSA-2021-9172
- ELSA-ELSA-2021-9115
- ELSA-ELSA-2021-9112
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.