Linux · Security advisory · August 10, 2021

RHSA-2021:3044: Security update for 4 packages

RHSA-2021:3044, released August 10, 2021, fixes 3 CVEs across 4 products. One of them is being exploited (CVE-2021-22555); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV

CVEs closed

None rated Critical

Exploited

CVE-2021-22555

Exploitation more likely

Vendor assessment

Highest EPSS

0.7868

99th percentile

Priority of the 3 CVEs

Patch now 1
                                Urgent 0
                                High 2
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kpatch-patch-4_18_0-305	RHEL 8	0:1-4.el8
kpatch-patch-4_18_0-305_10_2	RHEL 8	0:1-1.el8_4
kpatch-patch-4_18_0-305_3_1	RHEL 8	0:1-3.el8_4
kpatch-patch-4_18_0-305_7_1	RHEL 8	0:1-2.el8_4

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Patch now	CVE-2021-22555	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: r...	7.8	0.7868	KEVExploited
High	CVE-2021-22543	kpatch-patch-4_18_0-305_3_1: This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of...	7.8	0.0066	None reported
High	CVE-2021-3609	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: r...	7.0	0.0043	None reported