Headline
Red Hat Security Advisory 2023-1221-01
Red Hat Security Advisory 2023-1221-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include null pointer and use-after-free vulnerabilities.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
=====================================================================
Red Hat Security Advisory
Synopsis: Important: kernel security, bug fix, and enhancement update
Advisory ID: RHSA-2023:1221-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2023:1221
Issue date: 2023-03-14
CVE Names: CVE-2022-3564 CVE-2022-4269 CVE-2022-4378
=====================================================================
- Summary:
An update for kernel is now available for Red Hat Enterprise Linux 8.4
Extended Update Support.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
- Relevant releases/architectures:
Red Hat CodeReady Linux Builder EUS (v. 8.4) - aarch64, ppc64le, x86_64
Red Hat Enterprise Linux BaseOS EUS (v.8.4) - aarch64, noarch, ppc64le, s390x, x86_64
- Description:
The kernel packages contain the Linux kernel, the core of any Linux
operating system.
The following packages have been upgraded to a later upstream version:
kernel (4.18.0). (BZ#2165648)
Security Fix(es):
kernel: use-after-free caused by l2cap_reassemble_sdu() in
net/bluetooth/l2cap_core.c (CVE-2022-3564)kernel: stack overflow in do_proc_dointvec and proc_skip_spaces
(CVE-2022-4378)kernel: net: CPU soft lockup in TC mirred egress-to-ingress action
(CVE-2022-4269)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
Bug Fix(es):
RHEL 8.7 - Outputs of lsmem, lparstat, numactl and /proc/meminfo show
wrong value of memory when LMB size is set to 4GB. (BZ#2140092)RHEL8.4 - boot: Add secure boot trailer (BZ#2151532)
Concurrent reading of /proc/cpuinfo by multiple tasks causes soft lockup
(BZ#2154441)GSS: OCP 4.10.30 node crash after ODF upgrade : unable to handle kernel
NULL pointer dereference at 0000000000000000 :
ceph_get_snap_realm+0x68/0xa0 [ceph] (BZ#2155799)cgroup: Backport cgroup_mutex performance patches (BZ#2160165)
Redhat OpenShift: Error downloading big ZIP files inside pod on power OCP
and pod getting restarted (BZ#2160223)i40e/iavf: VF reset task fails “Never saw reset” with 5 second timeout
per VF (BZ#2160462)panic in fib6_rule_suppress+0x22 with custom xdp prog involved in
(BZ#2167606)
- Solution:
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.
- Bugs fixed (https://bugzilla.redhat.com/):
2150272 - CVE-2022-4269 kernel: net: CPU soft lockup in TC mirred egress-to-ingress action
2150999 - CVE-2022-3564 kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c
2152548 - CVE-2022-4378 kernel: stack overflow in do_proc_dointvec and proc_skip_spaces
- Package List:
Red Hat Enterprise Linux BaseOS EUS (v.8.4):
Source:
kernel-4.18.0-305.82.1.el8_4.src.rpm
aarch64:
bpftool-4.18.0-305.82.1.el8_4.aarch64.rpm
bpftool-debuginfo-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-core-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-cross-headers-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-debug-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-debug-core-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-debug-debuginfo-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-debug-devel-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-debug-modules-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-debug-modules-extra-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-debuginfo-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-debuginfo-common-aarch64-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-devel-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-headers-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-modules-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-modules-extra-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-tools-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-tools-debuginfo-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-tools-libs-4.18.0-305.82.1.el8_4.aarch64.rpm
perf-4.18.0-305.82.1.el8_4.aarch64.rpm
perf-debuginfo-4.18.0-305.82.1.el8_4.aarch64.rpm
python3-perf-4.18.0-305.82.1.el8_4.aarch64.rpm
python3-perf-debuginfo-4.18.0-305.82.1.el8_4.aarch64.rpm
noarch:
kernel-abi-stablelists-4.18.0-305.82.1.el8_4.noarch.rpm
kernel-doc-4.18.0-305.82.1.el8_4.noarch.rpm
ppc64le:
bpftool-4.18.0-305.82.1.el8_4.ppc64le.rpm
bpftool-debuginfo-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-core-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-cross-headers-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-debug-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-debug-core-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-debug-debuginfo-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-debug-devel-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-debug-modules-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-debug-modules-extra-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-debuginfo-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-debuginfo-common-ppc64le-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-devel-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-headers-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-modules-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-modules-extra-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-tools-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-tools-debuginfo-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-tools-libs-4.18.0-305.82.1.el8_4.ppc64le.rpm
perf-4.18.0-305.82.1.el8_4.ppc64le.rpm
perf-debuginfo-4.18.0-305.82.1.el8_4.ppc64le.rpm
python3-perf-4.18.0-305.82.1.el8_4.ppc64le.rpm
python3-perf-debuginfo-4.18.0-305.82.1.el8_4.ppc64le.rpm
s390x:
bpftool-4.18.0-305.82.1.el8_4.s390x.rpm
bpftool-debuginfo-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-core-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-cross-headers-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-debug-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-debug-core-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-debug-debuginfo-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-debug-devel-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-debug-modules-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-debug-modules-extra-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-debuginfo-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-debuginfo-common-s390x-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-devel-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-headers-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-modules-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-modules-extra-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-tools-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-tools-debuginfo-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-zfcpdump-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-zfcpdump-core-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-zfcpdump-debuginfo-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-zfcpdump-devel-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-zfcpdump-modules-4.18.0-305.82.1.el8_4.s390x.rpm
kernel-zfcpdump-modules-extra-4.18.0-305.82.1.el8_4.s390x.rpm
perf-4.18.0-305.82.1.el8_4.s390x.rpm
perf-debuginfo-4.18.0-305.82.1.el8_4.s390x.rpm
python3-perf-4.18.0-305.82.1.el8_4.s390x.rpm
python3-perf-debuginfo-4.18.0-305.82.1.el8_4.s390x.rpm
x86_64:
bpftool-4.18.0-305.82.1.el8_4.x86_64.rpm
bpftool-debuginfo-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-core-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-cross-headers-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-debug-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-debug-core-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-debug-debuginfo-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-debug-devel-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-debug-modules-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-debug-modules-extra-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-debuginfo-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-debuginfo-common-x86_64-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-devel-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-headers-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-modules-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-modules-extra-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-tools-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-tools-debuginfo-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-tools-libs-4.18.0-305.82.1.el8_4.x86_64.rpm
perf-4.18.0-305.82.1.el8_4.x86_64.rpm
perf-debuginfo-4.18.0-305.82.1.el8_4.x86_64.rpm
python3-perf-4.18.0-305.82.1.el8_4.x86_64.rpm
python3-perf-debuginfo-4.18.0-305.82.1.el8_4.x86_64.rpm
Red Hat CodeReady Linux Builder EUS (v. 8.4):
aarch64:
bpftool-debuginfo-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-debug-debuginfo-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-debuginfo-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-debuginfo-common-aarch64-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-tools-debuginfo-4.18.0-305.82.1.el8_4.aarch64.rpm
kernel-tools-libs-devel-4.18.0-305.82.1.el8_4.aarch64.rpm
perf-debuginfo-4.18.0-305.82.1.el8_4.aarch64.rpm
python3-perf-debuginfo-4.18.0-305.82.1.el8_4.aarch64.rpm
ppc64le:
bpftool-debuginfo-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-debug-debuginfo-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-debuginfo-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-debuginfo-common-ppc64le-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-tools-debuginfo-4.18.0-305.82.1.el8_4.ppc64le.rpm
kernel-tools-libs-devel-4.18.0-305.82.1.el8_4.ppc64le.rpm
perf-debuginfo-4.18.0-305.82.1.el8_4.ppc64le.rpm
python3-perf-debuginfo-4.18.0-305.82.1.el8_4.ppc64le.rpm
x86_64:
bpftool-debuginfo-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-debug-debuginfo-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-debuginfo-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-debuginfo-common-x86_64-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-tools-debuginfo-4.18.0-305.82.1.el8_4.x86_64.rpm
kernel-tools-libs-devel-4.18.0-305.82.1.el8_4.x86_64.rpm
perf-debuginfo-4.18.0-305.82.1.el8_4.x86_64.rpm
python3-perf-debuginfo-4.18.0-305.82.1.el8_4.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2022-3564
https://access.redhat.com/security/cve/CVE-2022-4269
https://access.redhat.com/security/cve/CVE-2022-4378
https://access.redhat.com/security/updates/classification/#important
- Contact:
The Red Hat security contact is [email protected]. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2023 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIVAwUBZBCPdtzjgjWX9erEAQic5Q/8Cj68MCFAELSRewV84SE+kRDJ8+7NPIhl
gU7t0pfGqPYdoHzx8tg0GqUbKYYGWrhpYkCBs4mF/SbPMzywdsM50VO8fxIRsaYs
pwZZAlbCgPg8KBCJmQk3BlpB1+uZgfYGxUUW3C+DLsQHnTN//cJvWG7TGBjBe9qy
3Mfx/A0rv3WKp+QZbcG/9FlC4Uj8EtJj7k0BG12VwEBnMY8kwGiMitLV6BmQj1XY
BhWhcERyJYk0TQHJWjbBC/55eBAYHNEqYRQUebZ5b6X+zYRZM1mSssp3sHFi3ymt
Y0x5UU9FV0L/XoOJcN1AcFrjF+43LK1yg24Paqi2o6xKEyLWUKo6aJtg2zwviL94
6e90BhXce1Zef6pPFU7Cvr6lgfHIhQaIL3WF7WUZNzEpJujgSaZ0eX754n7emmUb
4IqcY4tP+QBzXb7JVxACnKmTuJ8825cZVNTZx2IljUgnGqjM4xAIv4+3XM8ZIzdc
damUDDZdumsXFOdi1L17u4A+b1Udh3PTCXLmdmYlhaD/IVBpsZgWnlDZbOzLfLw+
kGODG13wWflox0vGM/FghXAUSi2PVWW7o6L0PAJxaUn5v+KpPS3VAjmENZLNvaXL
8u7hG4+cZqng+se/wXdLsiiAACRbY2w4CVYTqufOIiaDqSa9RkEOaOU39OXM8KtK
KOuUD8ZkvVU=
=UIr2
-----END PGP SIGNATURE-----
–
RHSA-announce mailing list
[email protected]
https://listman.redhat.com/mailman/listinfo/rhsa-announce
Related news
Ubuntu Security Notice 6385-1 - It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. William Zhao discovered that the Traffic Control subsystem in the Linux kernel did not properly handle network packet retransmission in certain situations. A local attacker could use this to cause a denial of service.
Ubuntu Security Notice 6332-1 - Daniel Moghimi discovered that some Intel Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. William Zhao discovered that the Traffic Control subsystem in the Linux kernel did not properly handle network packet retransmission in certain situations. A local attacker could use this to cause a denial of service.
Ubuntu Security Notice 6312-1 - It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service. Billy Jheng Bing Jhong discovered that the CIFS network file system implementation in the Linux kernel did not properly validate arguments to ioctl in some situations. A local attacker could possibly use this to cause a denial of service.
Ubuntu Security Notice 6300-1 - William Zhao discovered that the Traffic Control subsystem in the Linux kernel did not properly handle network packet retransmission in certain situations. A local attacker could use this to cause a denial of service. It was discovered that the NTFS file system implementation in the Linux kernel did not properly check buffer indexes in certain situations, leading to an out-of-bounds read vulnerability. A local attacker could possibly use this to expose sensitive information.
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges.
An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges.
An update for kernel is now available for Red Hat Enterprise Linux 7.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges.
Ubuntu Security Notice 6186-1 - Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. Gwangun Jung discovered that the Quick Fair Queueing scheduler implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.
Logging Subsystem 5.7.2 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-41723: A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests. * CVE-2023-27539: A denial of service vulnerability was found in rubygem-rack in how it parses headers. A carefully crafted input can cause header parsing to take an unexpe...
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. * CVE-2022-4378: A stack ove...
Dell VxRail versions earlier than 7.0.450, contain(s) an OS command injection vulnerability in VxRail Manager. A local authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker.
Red Hat Security Advisory 2023-2104-01 - Red Hat Advanced Cluster Management for Kubernetes 2.5.8 images Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which fix several bugs. Issues addressed include a denial of service vulnerability.
Red Hat Advanced Cluster Management for Kubernetes 2.6.5 General Availability release images, which fix bugs and security updates container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3841: A Server-Side Request Forgery (SSRF) vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes (RHACM). An attacker could take advantage of this as the console API endpoint is missing an authentication check, allowing unauth...
Logging Subsystem 5.6.5 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-27539: A denial of service vulnerability was found in rubygem-rack in how it parses headers. A carefully crafted input can cause header parsing to take an unexpected amount of time, possibly resulting in a denial of service. * CVE-2023-28120: A Cross-Site-Scripting vulnerability was found in rubygem ActiveSupport. If the new bytesplice method is called on a SafeBuffer with untrus...
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. * CVE-2023-0266: A...
Red Hat Security Advisory 2023-1559-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include a use-after-free vulnerability.
Red Hat Security Advisory 2023-1584-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4269: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of...
Red Hat Security Advisory 2023-1393-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.10.55.
Red Hat OpenShift Container Platform release 4.10.55 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-20329: A flaw was found in Mongo. Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshaling Go objects into BSON. This flaw allows a malicious user to use a Go object with a specific string to inject additional fields into marshaled docume...
Red Hat OpenShift Container Platform release 4.10.55 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-4238: A flaw was found in goutils where randomly generated alphanumeric strings contain significantly less entropy than expected. Both the `RandomAlphaNumeric` and `CryptoRandomAlphaNumeric` functions always return strings containing at least one digit from 0 to 9. This issu...
Red Hat Security Advisory 2023-1469-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include a double free vulnerability.
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4269: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of se...
An update for kernel-rt is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4269: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of...
An update for kpatch-patch is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. * CVE-2022-4378: A stack ove...
Red Hat Security Advisory 2023-1202-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include denial of service, integer overflow, and use-after-free vulnerabilities.
Red Hat Security Advisory 2023-1220-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include a use-after-free vulnerability.
Red Hat Security Advisory 2023-1203-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include denial of service, integer overflow, and use-after-free vulnerabilities.
An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. * CVE-2022-4269: A flaw was found ...
An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. * CVE-2022-4269: A flaw was found ...
An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. * CVE-2022-4269: A flaw was found ...
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. * CVE-2022-4269: A flaw was fou...
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. * CVE-2022-4269: A flaw was fou...
An update for kernel is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. * CVE-2022-4269: A flaw was found ...
An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. * CVE-2022-4269: A flaw was fou...
Red Hat Security Advisory 2023-1109-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system.
Red Hat Security Advisory 2023-1110-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Red Hat Security Advisory 2023-1130-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include null pointer and use-after-free vulnerabilities.
Red Hat Security Advisory 2023-1092-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include a use-after-free vulnerability.
An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2964: A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes. * CVE-2022-4269: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking co...
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4378: A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system. * CVE-2022-42703: A memory leak flaw with use-after-free capability was found in the Linux kernel. The VMA mm/rmap.c fun...
Red Hat Security Advisory 2023-1008-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Issues addressed include denial of service, integer overflow, and use-after-free vulnerabilities.
Red Hat Security Advisory 2023-1008-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Issues addressed include denial of service, integer overflow, and use-after-free vulnerabilities.
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4378: A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Red Hat Security Advisory 2023-0856-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include a use-after-free vulnerability.
Red Hat Security Advisory 2023-0856-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include a use-after-free vulnerability.
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2964: A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes. * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality...
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2964: A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes. * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality...
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Ubuntu Security Notice 5773-1 - It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.
Ubuntu Security Notice 5756-3 - Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that a memory leak existed in the IPv6 implementation of the Linux kernel. A local attacker could use this to cause a denial of service.
A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.
A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.
Ubuntu Security Notice 5757-2 - Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that the video4linux driver for Empia based TV cards in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.
Ubuntu Security Notice 5756-1 - Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that a memory leak existed in the IPv6 implementation of the Linux kernel. A local attacker could use this to cause a denial of service.
Ubuntu Security Notice 5755-1 - It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.