kernel-3.10.0-1160.24.1.el7

The kernel packages contain the Linux kernel, the core of any Linux operating
system.

Security Fix(es):

* kernel: out-of-bounds read in libiscsi module (CVE-2021-27364)
* kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365)
* kernel: iscsi: unrestricted access to sessions and handles (CVE-2021-27363)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

Bug Fix(es):

* Customer testing eMMC sees and intermittent boot problem on 7.8+, was not
seen on 7.3
* tcm loopback driver causes double-start of scsi command when work is delayed

* [Azure]Mellanox Patches To Prevent Kernel Hang In MLX4
A patch from upstream c365c292d059 causes us to end up leaving rt_nr_boosted in
an inconsistent state, which causes a hard lockup.
* Add fix to update snd_wl1 in bulk receiver fast path

CVE(s):
CVE-2021-27363
An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer
leak can be used to determine the address of the iscsi_transport structure. When
an iSCSI transport is registered with the iSCSI subsystem, the transport's
handle is available to unprivileged users via the sysfs file system, at
/sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the
show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is
called, which leaks the handle. This handle is actually the pointer to an
iscsi_transport struct in the kernel module's global variables.
CVE-2021-27364
An issue was discovered in the Linux kernel through 5.11.3.
drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an
unprivileged user to craft Netlink messages.
CVE-2021-27365
An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data
structures do not have appropriate length constraints or checks, and can exceed
the PAGE_SIZE value. An unprivileged user can send a Netlink message that is
associated with iSCSI, and has a length up to the maximum length of a Netlink
message.