Security Fix(es):

• kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type (CVE-2021-43267)
• kernel: timer tree corruption leads to missing wakeup and system freeze (CVE-2021-20317)
• kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode (CVE-2021-28950)

Bug Fix(es):

• Fix repeated xhci wake after suspend due to uncleared internal wake state (BZ#2003789)
• CephFS mount points return "permission denied" (BZ#2017099)

Enhancement(s):

• Update qla2xxx driver to latest upstream (BZ#2014150)

https://listman.redhat.com/archives/rhsa-announce/2021-November/msg00143.html