CVE-2020-0466

kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...

CVE-2020-0466 is fixed in 37 products on 1 platform, first by RHSA-2021:1093, released April 6, 2021. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.8
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0028
20th percentile

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: use after free in eventpoll.c may lead to escalation of privilege (CVE-2020-0466) * kernel: SCSI target (LIO) write to any block on ILO backstore (CVE-2020-28374) * kernel: Use after free via PI futex state (CVE-2021-3347) * kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c (CVE-2021-26708) * kernel: out-of-bounds read in libiscsi module (CVE-2021-27364) * kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365) * Kernel: KVM: host stack overflow due to lazy update IOAPIC (CVE-2020-27152) * kernel: iscsi: unrestricted access to sessions and handles (CVE-2021-27363) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel-rt possible livelock: WARNING: CPU: 28 PID: 3109 at kernel/ptrace.c:242 ptrace_check_attach+0xdd/0x1a0 (BZ#1925308) * kernel-rt: update RT source tree to the RHEL-8.3.z3 source tree (BZ#1926369)

Where it's fixed

ProductFixed inFixReleased
Linux
bpftool · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
bpftool · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-abi-whitelists · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-abi-whitelists · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-core · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-core · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-cross-headers · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-debug · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-debug · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-debug-core · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-debug-core · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-debug-devel · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-debug-devel · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-debug-modules · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-debug-modules · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-debug-modules-extra · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-debug-modules-extra · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-devel · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-devel · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-doc · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-doc · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-headers · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-modules · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-modules · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-modules-extra · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-modules-extra · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-rt · RHEL 8 0:4.18.0-240.22.1.rt7.77.el8_3 RHSA-2021:1081 Apr 6, 2021
kernel-rt-core · RHEL 8 0:4.18.0-240.22.1.rt7.77.el8_3 RHSA-2021:1081 Apr 6, 2021
kernel-rt-debug · RHEL 8 0:4.18.0-240.22.1.rt7.77.el8_3 RHSA-2021:1081 Apr 6, 2021
kernel-rt-debug-core · RHEL 8 0:4.18.0-240.22.1.rt7.77.el8_3 RHSA-2021:1081 Apr 6, 2021
kernel-rt-debug-devel · RHEL 8 0:4.18.0-240.22.1.rt7.77.el8_3 RHSA-2021:1081 Apr 6, 2021
kernel-rt-debug-kvm · RHEL 8 0:4.18.0-240.22.1.rt7.77.el8_3 RHSA-2021:1081 Apr 6, 2021
kernel-rt-debug-modules · RHEL 8 0:4.18.0-240.22.1.rt7.77.el8_3 RHSA-2021:1081 Apr 6, 2021
kernel-rt-debug-modules-extra · RHEL 8 0:4.18.0-240.22.1.rt7.77.el8_3 RHSA-2021:1081 Apr 6, 2021
kernel-rt-devel · RHEL 8 0:4.18.0-240.22.1.rt7.77.el8_3 RHSA-2021:1081 Apr 6, 2021
kernel-rt-kvm · RHEL 8 0:4.18.0-240.22.1.rt7.77.el8_3 RHSA-2021:1081 Apr 6, 2021
kernel-rt-modules · RHEL 8 0:4.18.0-240.22.1.rt7.77.el8_3 RHSA-2021:1081 Apr 6, 2021
kernel-rt-modules-extra · RHEL 8 0:4.18.0-240.22.1.rt7.77.el8_3 RHSA-2021:1081 Apr 6, 2021
kernel-tools · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-tools · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-tools-libs · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-tools-libs · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-tools-libs-devel · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-tools-libs-devel · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
kernel-zfcpdump · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-zfcpdump-core · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-zfcpdump-devel · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-zfcpdump-modules · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
kernel-zfcpdump-modules-extra · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
perf · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
perf · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021
python3-perf · RHEL 8 0:4.18.0-240.22.1.el8_3 RHSA-2021:1093 Apr 6, 2021
python3-perf · ol 8 0:4.18.0-240.22.1.el8_3 ELSA-2021-1093 Apr 7, 2021

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.