Headline
Red Hat Security Advisory 2023-1468-01
Red Hat Security Advisory 2023-1468-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include a double free vulnerability.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
=====================================================================
Red Hat Security Advisory
Synopsis: Important: kernel security, bug fix, and enhancement update
Advisory ID: RHSA-2023:1468-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2023:1468
Issue date: 2023-03-27
CVE Names: CVE-2022-4744
=====================================================================
- Summary:
An update for kernel is now available for Red Hat Enterprise Linux 9.0
Extended Update Support.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
- Relevant releases/architectures:
Red Hat CodeReady Linux Builder EUS (v.9.0) - aarch64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux AppStream EUS (v.9.0) - aarch64, noarch, ppc64le, s390x, x86_64
Red Hat Enterprise Linux BaseOS EUS (v.9.0) - aarch64, noarch, ppc64le, s390x, x86_64
- Description:
The kernel packages contain the Linux kernel, the core of any Linux
operating system.
Security Fix(es):
- kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
Bug Fix(es):
RHEL 9.1 Extending NMI watchdog’s timer during LPM (BZ#2140086)
RHEL9.1 Rainer 2gb/4GB LMB: kdump is not working with 2GB/4GB LMB
size[FW1030]. (BZ#2151867)RHEL9.0 - s390/kexec: fix ipl report address for kdump (BZ#2166904)
Azure RHEL-9 RMB MANA: RMB Patch To Backport On The Azure Linux Images
(BZ#2172876)
Enhancement(s):
- IBM 9.2 FEAT Upgrade the QETH driver to the latest from upstream, e.g.
kernel 6.0 (BZ#2166305)
- Solution:
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.
- Bugs fixed (https://bugzilla.redhat.com/):
2156322 - CVE-2022-4744 kernel: tun: avoid double free in tun_free_netdev
- Package List:
Red Hat Enterprise Linux AppStream EUS (v.9.0):
aarch64:
bpftool-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-debug-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-debug-devel-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-debug-devel-matched-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-debuginfo-common-aarch64-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-devel-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-devel-matched-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-headers-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-tools-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
perf-5.14.0-70.50.2.el9_0.aarch64.rpm
perf-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
python3-perf-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
noarch:
kernel-doc-5.14.0-70.50.2.el9_0.noarch.rpm
ppc64le:
bpftool-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-debug-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-debug-devel-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-debug-devel-matched-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-debuginfo-common-ppc64le-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-devel-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-devel-matched-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-headers-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-tools-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
perf-5.14.0-70.50.2.el9_0.ppc64le.rpm
perf-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
python3-perf-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
s390x:
bpftool-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-debug-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-debug-devel-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-debug-devel-matched-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-debuginfo-common-s390x-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-devel-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-devel-matched-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-headers-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-tools-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-zfcpdump-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-zfcpdump-devel-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-zfcpdump-devel-matched-5.14.0-70.50.2.el9_0.s390x.rpm
perf-5.14.0-70.50.2.el9_0.s390x.rpm
perf-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
python3-perf-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
x86_64:
bpftool-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-debug-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-debug-devel-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-debug-devel-matched-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-debuginfo-common-x86_64-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-devel-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-devel-matched-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-headers-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-tools-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
perf-5.14.0-70.50.2.el9_0.x86_64.rpm
perf-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
python3-perf-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
Red Hat Enterprise Linux BaseOS EUS (v.9.0):
Source:
kernel-5.14.0-70.50.2.el9_0.src.rpm
aarch64:
bpftool-5.14.0-70.50.2.el9_0.aarch64.rpm
bpftool-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-core-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-debug-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-debug-core-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-debug-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-debug-modules-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-debug-modules-extra-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-debuginfo-common-aarch64-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-modules-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-modules-extra-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-tools-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-tools-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-tools-libs-5.14.0-70.50.2.el9_0.aarch64.rpm
perf-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
python3-perf-5.14.0-70.50.2.el9_0.aarch64.rpm
python3-perf-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
noarch:
kernel-abi-stablelists-5.14.0-70.50.2.el9_0.noarch.rpm
ppc64le:
bpftool-5.14.0-70.50.2.el9_0.ppc64le.rpm
bpftool-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-core-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-debug-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-debug-core-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-debug-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-debug-modules-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-debug-modules-extra-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-debuginfo-common-ppc64le-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-modules-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-modules-extra-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-tools-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-tools-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-tools-libs-5.14.0-70.50.2.el9_0.ppc64le.rpm
perf-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
python3-perf-5.14.0-70.50.2.el9_0.ppc64le.rpm
python3-perf-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
s390x:
bpftool-5.14.0-70.50.2.el9_0.s390x.rpm
bpftool-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-core-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-debug-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-debug-core-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-debug-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-debug-modules-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-debug-modules-extra-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-debuginfo-common-s390x-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-modules-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-modules-extra-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-tools-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-tools-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-zfcpdump-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-zfcpdump-core-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-zfcpdump-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-zfcpdump-modules-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-zfcpdump-modules-extra-5.14.0-70.50.2.el9_0.s390x.rpm
perf-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
python3-perf-5.14.0-70.50.2.el9_0.s390x.rpm
python3-perf-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
x86_64:
bpftool-5.14.0-70.50.2.el9_0.x86_64.rpm
bpftool-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-core-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-debug-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-debug-core-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-debug-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-debug-modules-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-debug-modules-extra-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-debuginfo-common-x86_64-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-modules-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-modules-extra-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-tools-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-tools-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-tools-libs-5.14.0-70.50.2.el9_0.x86_64.rpm
perf-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
python3-perf-5.14.0-70.50.2.el9_0.x86_64.rpm
python3-perf-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
Red Hat CodeReady Linux Builder EUS (v.9.0):
aarch64:
bpftool-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-cross-headers-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-debug-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-debuginfo-common-aarch64-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-tools-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
kernel-tools-libs-devel-5.14.0-70.50.2.el9_0.aarch64.rpm
perf-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
python3-perf-debuginfo-5.14.0-70.50.2.el9_0.aarch64.rpm
ppc64le:
bpftool-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-cross-headers-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-debug-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-debuginfo-common-ppc64le-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-tools-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
kernel-tools-libs-devel-5.14.0-70.50.2.el9_0.ppc64le.rpm
perf-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
python3-perf-debuginfo-5.14.0-70.50.2.el9_0.ppc64le.rpm
s390x:
bpftool-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-cross-headers-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-debug-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-debuginfo-common-s390x-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-tools-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
kernel-zfcpdump-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
perf-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
python3-perf-debuginfo-5.14.0-70.50.2.el9_0.s390x.rpm
x86_64:
bpftool-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-cross-headers-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-debug-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-debuginfo-common-x86_64-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-tools-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
kernel-tools-libs-devel-5.14.0-70.50.2.el9_0.x86_64.rpm
perf-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
python3-perf-debuginfo-5.14.0-70.50.2.el9_0.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2022-4744
https://access.redhat.com/security/updates/classification/#important
- Contact:
The Red Hat security contact is [email protected]. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2023 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=9xNC
-----END PGP SIGNATURE-----
–
RHSA-announce mailing list
[email protected]
https://listman.redhat.com/mailman/listinfo/rhsa-announce
Related news
Red Hat Security Advisory 2023-7077-01 - An update for kernel is now available for Red Hat Enterprise Linux 8. Issues addressed include buffer overflow, denial of service, double free, information leakage, memory leak, null pointer, out of bounds access, out of bounds write, and use-after-free vulnerabilities.
Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance and system malfunction.
A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.
Red Hat Security Advisory 2023-1470-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include a double free vulnerability.
Red Hat Security Advisory 2023-1467-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include a double free vulnerability.
Red Hat Security Advisory 2023-1469-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include a double free vulnerability.
Red Hat Security Advisory 2023-1471-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Issues addressed include a double free vulnerability.
An update for kernel is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4744: A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4269: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of se...
An update for kpatch-patch is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4744: A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.
An update for kpatch-patch is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4744: A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system. * CVE-2023-0266: A use-after-free flaw was found in the...
An update for kernel-rt is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4269: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of...
An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4744: A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.