Headline
Red Hat Security Advisory 2022-4924-01
Red Hat Security Advisory 2022-4924-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include a buffer overflow vulnerability.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
====================================================================
Red Hat Security Advisory
Synopsis: Important: kernel security and bug fix update
Advisory ID: RHSA-2022:4924-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2022:4924
Issue date: 2022-06-07
CVE Names: CVE-2022-27666
====================================================================
- Summary:
An update for kernel is now available for Red Hat Enterprise Linux 8.1
Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
- Relevant releases/architectures:
Red Hat Enterprise Linux BaseOS E4S (v. 8.1) - aarch64, noarch, ppc64le, s390x, x86_64
- Description:
The kernel packages contain the Linux kernel, the core of any Linux
operating system.
Security Fix(es):
- kernel: buffer overflow in IPsec ESP transformation code (CVE-2022-27666)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
Bug Fix(es):
- RH8.6 - slub corruption during LPM of hnv interface (BZ#2081253)
- Solution:
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.
- Bugs fixed (https://bugzilla.redhat.com/):
2061633 - CVE-2022-27666 kernel: buffer overflow in IPsec ESP transformation code
- Package List:
Red Hat Enterprise Linux BaseOS E4S (v. 8.1):
Source:
kernel-4.18.0-147.67.1.el8_1.src.rpm
aarch64:
bpftool-4.18.0-147.67.1.el8_1.aarch64.rpm
bpftool-debuginfo-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-core-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-cross-headers-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-debug-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-debug-core-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-debug-debuginfo-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-debug-devel-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-debug-modules-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-debug-modules-extra-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-debuginfo-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-debuginfo-common-aarch64-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-devel-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-headers-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-modules-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-modules-extra-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-tools-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-tools-debuginfo-4.18.0-147.67.1.el8_1.aarch64.rpm
kernel-tools-libs-4.18.0-147.67.1.el8_1.aarch64.rpm
perf-4.18.0-147.67.1.el8_1.aarch64.rpm
perf-debuginfo-4.18.0-147.67.1.el8_1.aarch64.rpm
python3-perf-4.18.0-147.67.1.el8_1.aarch64.rpm
python3-perf-debuginfo-4.18.0-147.67.1.el8_1.aarch64.rpm
noarch:
kernel-abi-whitelists-4.18.0-147.67.1.el8_1.noarch.rpm
kernel-doc-4.18.0-147.67.1.el8_1.noarch.rpm
ppc64le:
bpftool-4.18.0-147.67.1.el8_1.ppc64le.rpm
bpftool-debuginfo-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-core-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-cross-headers-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-debug-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-debug-core-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-debug-debuginfo-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-debug-devel-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-debug-modules-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-debug-modules-extra-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-debuginfo-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-debuginfo-common-ppc64le-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-devel-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-headers-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-modules-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-modules-extra-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-tools-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-tools-debuginfo-4.18.0-147.67.1.el8_1.ppc64le.rpm
kernel-tools-libs-4.18.0-147.67.1.el8_1.ppc64le.rpm
perf-4.18.0-147.67.1.el8_1.ppc64le.rpm
perf-debuginfo-4.18.0-147.67.1.el8_1.ppc64le.rpm
python3-perf-4.18.0-147.67.1.el8_1.ppc64le.rpm
python3-perf-debuginfo-4.18.0-147.67.1.el8_1.ppc64le.rpm
s390x:
bpftool-4.18.0-147.67.1.el8_1.s390x.rpm
bpftool-debuginfo-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-core-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-cross-headers-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-debug-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-debug-core-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-debug-debuginfo-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-debug-devel-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-debug-modules-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-debug-modules-extra-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-debuginfo-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-debuginfo-common-s390x-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-devel-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-headers-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-modules-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-modules-extra-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-tools-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-tools-debuginfo-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-zfcpdump-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-zfcpdump-core-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-zfcpdump-debuginfo-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-zfcpdump-devel-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-zfcpdump-modules-4.18.0-147.67.1.el8_1.s390x.rpm
kernel-zfcpdump-modules-extra-4.18.0-147.67.1.el8_1.s390x.rpm
perf-4.18.0-147.67.1.el8_1.s390x.rpm
perf-debuginfo-4.18.0-147.67.1.el8_1.s390x.rpm
python3-perf-4.18.0-147.67.1.el8_1.s390x.rpm
python3-perf-debuginfo-4.18.0-147.67.1.el8_1.s390x.rpm
x86_64:
bpftool-4.18.0-147.67.1.el8_1.x86_64.rpm
bpftool-debuginfo-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-core-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-cross-headers-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-debug-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-debug-core-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-debug-debuginfo-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-debug-devel-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-debug-modules-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-debug-modules-extra-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-debuginfo-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-debuginfo-common-x86_64-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-devel-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-headers-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-modules-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-modules-extra-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-tools-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-tools-debuginfo-4.18.0-147.67.1.el8_1.x86_64.rpm
kernel-tools-libs-4.18.0-147.67.1.el8_1.x86_64.rpm
perf-4.18.0-147.67.1.el8_1.x86_64.rpm
perf-debuginfo-4.18.0-147.67.1.el8_1.x86_64.rpm
python3-perf-4.18.0-147.67.1.el8_1.x86_64.rpm
python3-perf-debuginfo-4.18.0-147.67.1.el8_1.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2022-27666
https://access.redhat.com/security/updates/classification/#important
- Contact:
The Red Hat security contact is [email protected]. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2022 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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GYpS
-----END PGP SIGNATURE-----
–
RHSA-announce mailing list
[email protected]
https://listman.redhat.com/mailman/listinfo/rhsa-announce
Related news
gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers in exceptional cases/ Three vectors were found that allow the following DOS attacks: - Unbounded memory buffering in the HPACK parser - Unbounded CPU consumption in the HPACK parser The unbounded CPU consumption is down to a copy that occurred per-input-block in the parser, and because that could be unbounded due to the memory copy bug we end up with an O(n^2) parsing loop, with n selected by the client. The unbounded memory buffering bugs: - The header size limit check was behind the string reading code, so we needed to first buffer up to a 4 gigabyte string before rejecting it as longer than 8 or 16kb. - HPACK varints have an encoding quirk whereby an infinite number of 0’s can be added at the start of an integer. gRPC’s hpack parser needed to read all of them before concluding a parse. - gRPC’s metadata overflow check was performed per frame, so ...
A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 4.21.5 for protobuf-python can lead to out of memory failures. A specially crafted message with multiple key-value per elements creates parsing issues, and can lead to a Denial of Service against services receiving unsanitized input. We recommend upgrading to versions 3.18.3, 3.19.5, 3.20.2, 3.21.6 for protobuf-cpp and 3.18.3, 3.19.5, 3.20.2, 4.21.6 for protobuf-python. Versions for 3.16 and 3.17 are no longer updated.
OpenHarmony-v3.1.2 and prior versions have a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information.
In bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182815710References: Upstream kernel
Red Hat Security Advisory 2022-5840-01 - The Migration Toolkit for Containers enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the MTC web console or the Kubernetes API.
Red Hat Security Advisory 2022-5556-01 - Logging Subsystem 5.4.3 has security updates. Issues addressed include denial of service and out of bounds read vulnerabilities.
An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-27666: kernel: buffer overflow in IPsec ESP transformation code * CVE-2022-28733: grub2: Integer underflow in grub_net_recv_ip4_packets
Red Hat Security Advisory 2022-5476-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Issues addressed include buffer overflow, privilege escalation, and use-after-free vulnerabilities.
An update is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1966: kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root * CVE-2022-27666: kernel: buffer overflow in IPsec ESP transformation code
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2020-28915: kernel: out-of-bounds read in fbcon_get_font function * CVE-2022-27666: kernel: buffer overflow in IPsec ESP transformation code
Red Hat Security Advisory 2022-5344-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include buffer overflow and out of bounds read vulnerabilities.
Red Hat Security Advisory 2022-5220-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include buffer overflow, information leakage, memory leak, privilege escalation, and use-after-free vulnerabilities.
Red Hat Security Advisory 2022-5224-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include buffer overflow, information leakage, privilege escalation, and use-after-free vulnerabilities.
Red Hat Security Advisory 2022-5267-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include buffer overflow, information leakage, privilege escalation, and use-after-free vulnerabilities.
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2020-28915: kernel: out-of-bounds read in fbcon_get_font function * CVE-2022-27666: kernel: buffer overflow in IPsec ESP transformation code
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-27666: kernel: buffer overflow in IPsec ESP transformation code
An update for kernel-rt is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1012: kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak * CVE-2022-1729: kernel: race condition in perf_event_open leads to privilege escalation * CVE-2022-1966: kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root * CVE-2022-27666: kernel: buffer ov...
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2020-29368: kernel: the copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check * CVE-2022-1012: kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak * CVE-2022-1729: kernel: race condition in perf_event_open leads to p...
An update for kpatch-patch is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1012: kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak * CVE-2022-1966: kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root * CVE-2022-27666: kernel: buffer overflow in IPsec ESP transformation code
Red Hat Security Advisory 2022-4942-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Issues addressed include a buffer overflow vulnerability.
An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-27666: kernel: buffer overflow in IPsec ESP transformation code
Red Hat Security Advisory 2022-4835-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include a buffer overflow vulnerability.
Red Hat Security Advisory 2022-4829-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include a buffer overflow vulnerability.
Red Hat Security Advisory 2022-4809-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Issues addressed include a buffer overflow vulnerability.
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-4037: kernel: security regression for CVE-2018-13405 * CVE-2021-20322: kernel: new DNS Cache Poisoning Attack based on ICMP fragment needed packets replies * CVE-2022-27666: kernel: buffer overflow in IPsec ESP transformation code
An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-4037: kernel: security regression for CVE-2018-13405 * CVE-2021-20322: kernel: new DNS Cache Poisoning Attack based on ICMP fragment needed packets replies * CVE-2022-27666: kernel: buffer overflow in IPsec ESP transformation code
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-27666: kernel: buffer overflow in IPsec ESP transformation code