Headline
Red Hat Security Advisory 2022-7171-01
Red Hat Security Advisory 2022-7171-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include privilege escalation and use-after-free vulnerabilities.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
====================================================================
Red Hat Security Advisory
Synopsis: Important: kernel security and bug fix update
Advisory ID: RHSA-2022:7171-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2022:7171
Issue date: 2022-10-25
CVE Names: CVE-2022-2588
====================================================================
- Summary:
An update for kernel is now available for Red Hat Enterprise Linux 7.6
Advanced Update Support, Red Hat Enterprise Linux 7.6 Telco Extended Update
Support, and Red Hat Enterprise Linux 7.6 Update Services for SAP
Solutions.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
- Relevant releases/architectures:
Red Hat Enterprise Linux Server AUS (v. 7.6) - noarch, x86_64
Red Hat Enterprise Linux Server E4S (v. 7.6) - noarch, ppc64le, x86_64
Red Hat Enterprise Linux Server Optional AUS (v. 7.6) - x86_64
Red Hat Enterprise Linux Server Optional E4S (v. 7.6) - ppc64le, x86_64
Red Hat Enterprise Linux Server Optional TUS (v. 7.6) - x86_64
Red Hat Enterprise Linux Server TUS (v. 7.6) - noarch, x86_64
- Description:
The kernel packages contain the Linux kernel, the core of any Linux
operating system.
Security Fix(es):
- a use-after-free in cls_route filter implementation may lead to privilege
escalation (CVE-2022-2588)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
Bug Fix(es):
- backports from upstream for netfilter (BZ#2120635)
- Solution:
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.
- Bugs fixed (https://bugzilla.redhat.com/):
2114849 - CVE-2022-2588 kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation
- Package List:
Red Hat Enterprise Linux Server AUS (v. 7.6):
Source:
kernel-3.10.0-957.99.1.el7.src.rpm
noarch:
kernel-abi-whitelists-3.10.0-957.99.1.el7.noarch.rpm
kernel-doc-3.10.0-957.99.1.el7.noarch.rpm
x86_64:
bpftool-3.10.0-957.99.1.el7.x86_64.rpm
kernel-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debug-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-957.99.1.el7.x86_64.rpm
kernel-devel-3.10.0-957.99.1.el7.x86_64.rpm
kernel-headers-3.10.0-957.99.1.el7.x86_64.rpm
kernel-tools-3.10.0-957.99.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-957.99.1.el7.x86_64.rpm
perf-3.10.0-957.99.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
python-perf-3.10.0-957.99.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
Red Hat Enterprise Linux Server E4S (v. 7.6):
Source:
kernel-3.10.0-957.99.1.el7.src.rpm
noarch:
kernel-abi-whitelists-3.10.0-957.99.1.el7.noarch.rpm
kernel-doc-3.10.0-957.99.1.el7.noarch.rpm
ppc64le:
kernel-3.10.0-957.99.1.el7.ppc64le.rpm
kernel-bootwrapper-3.10.0-957.99.1.el7.ppc64le.rpm
kernel-debug-3.10.0-957.99.1.el7.ppc64le.rpm
kernel-debug-debuginfo-3.10.0-957.99.1.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-957.99.1.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-957.99.1.el7.ppc64le.rpm
kernel-devel-3.10.0-957.99.1.el7.ppc64le.rpm
kernel-headers-3.10.0-957.99.1.el7.ppc64le.rpm
kernel-tools-3.10.0-957.99.1.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-957.99.1.el7.ppc64le.rpm
kernel-tools-libs-3.10.0-957.99.1.el7.ppc64le.rpm
perf-3.10.0-957.99.1.el7.ppc64le.rpm
perf-debuginfo-3.10.0-957.99.1.el7.ppc64le.rpm
python-perf-3.10.0-957.99.1.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-957.99.1.el7.ppc64le.rpm
x86_64:
kernel-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debug-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-957.99.1.el7.x86_64.rpm
kernel-devel-3.10.0-957.99.1.el7.x86_64.rpm
kernel-headers-3.10.0-957.99.1.el7.x86_64.rpm
kernel-tools-3.10.0-957.99.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-957.99.1.el7.x86_64.rpm
perf-3.10.0-957.99.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
python-perf-3.10.0-957.99.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
Red Hat Enterprise Linux Server TUS (v. 7.6):
Source:
kernel-3.10.0-957.99.1.el7.src.rpm
noarch:
kernel-abi-whitelists-3.10.0-957.99.1.el7.noarch.rpm
kernel-doc-3.10.0-957.99.1.el7.noarch.rpm
x86_64:
bpftool-3.10.0-957.99.1.el7.x86_64.rpm
kernel-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debug-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-957.99.1.el7.x86_64.rpm
kernel-devel-3.10.0-957.99.1.el7.x86_64.rpm
kernel-headers-3.10.0-957.99.1.el7.x86_64.rpm
kernel-tools-3.10.0-957.99.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-957.99.1.el7.x86_64.rpm
perf-3.10.0-957.99.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
python-perf-3.10.0-957.99.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
Red Hat Enterprise Linux Server Optional AUS (v. 7.6):
x86_64:
kernel-debug-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-957.99.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-957.99.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
Red Hat Enterprise Linux Server Optional E4S (v. 7.6):
ppc64le:
kernel-debug-debuginfo-3.10.0-957.99.1.el7.ppc64le.rpm
kernel-debug-devel-3.10.0-957.99.1.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-957.99.1.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-957.99.1.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-957.99.1.el7.ppc64le.rpm
kernel-tools-libs-devel-3.10.0-957.99.1.el7.ppc64le.rpm
perf-debuginfo-3.10.0-957.99.1.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-957.99.1.el7.ppc64le.rpm
x86_64:
kernel-debug-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-957.99.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-957.99.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
Red Hat Enterprise Linux Server Optional TUS (v. 7.6):
x86_64:
kernel-debug-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-957.99.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-957.99.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-957.99.1.el7.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2022-2588
https://access.redhat.com/security/updates/classification/#important
- Contact:
The Red Hat security contact is [email protected]. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2022 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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-----END PGP SIGNATURE-----
–
RHSA-announce mailing list
[email protected]
https://listman.redhat.com/mailman/listinfo/rhsa-announce
Related news
Red Hat Security Advisory 2023-4023-01 - The kpatch management tool provides a kernel patching infrastructure which allows you to patch a running kernel without rebooting or restarting any processes. Issues addressed include privilege escalation and use-after-free vulnerabilities.
Dell VxRail, versions prior to 7.0.410, contain a Container Escape Vulnerability. A local high-privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the container's underlying OS. Exploitation may lead to a system take over by an attacker.
Red Hat OpenShift Container Platform release 4.8.53 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-26945: go-getter: command injection vulnerability * CVE-2022-30321: go-getter: unsafe download (issue 1 of 3) * CVE-2022-30322: go-getter: unsafe download (issue 2 of 3) * CVE-2022-30323: go...
An update is now available for OpenShift Logging 5.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-32149: golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags
Red Hat Security Advisory 2022-7313-01 - Red Hat Advanced Cluster Management for Kubernetes 2.6.2 images Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Issues addressed include denial of service and remote SQL injection vulnerabilities.
Red Hat OpenShift Container Platform release 4.9.51 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.9.51 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-26945: go-getter: command injection vulnerability * CVE-2022-30321: go-getter: unsafe download (issue 1 of 3) * CVE-2022-30322: go-getter: unsafe download (issue 2 of 3) * CVE-2022-30323: ...
Red Hat Security Advisory 2022-7201-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.11.12. Issues addressed include a code execution vulnerability.
Red Hat Security Advisory 2022-7211-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.10.39. Issues addressed include a code execution vulnerability.
Red Hat Advanced Cluster Management for Kubernetes 2.6.2 General Availability release images, which fix bugs and update container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2238: search-api: SQL injection leads to remote denial of service * CVE-2022-25858: terser: insecure use of regular expressions leads to ReDoS * CVE-2022-25887: sanitize-html: insecure global regular expression replacement logic may lead to ReDoS * CVE-2022-25896: passport: incorrect ses...
An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2588: kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation * CVE-2022-21123: hw: cpu: Incomplete cleanup of multi-core shared buffers (aka S...
Red Hat Security Advisory 2022-7110-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include code execution, information leakage, memory leak, privilege escalation, and use-after-free vulnerabilities.
An update for kernel is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2588: kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-0494: kernel: information leak in scsi_ioctl() * CVE-2022-1353: Kernel: A kernel-info-leak issue in pfkey_register * CVE-2022-2588: kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation * CVE-2022-23816: hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions * CVE-2022-23825: hw: cpu:...
SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.
Red Hat Security Advisory 2022-6983-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include information leakage, privilege escalation, and use-after-free vulnerabilities.
An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-45485: kernel: information leak in the IPv6 implementation * CVE-2021-45486: kernel: information leak in the IPv4 implementation * CVE-2022-2588: kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation * CVE-2022-21123: hw: cpu: Incomplete cleanup of multi-core shared buffers (aka SBDR) * CV...
An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2588: kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation * CVE-2022-21123: hw: cpu: Incomplete cleanup of multi-core shared buffers (aka SBDR) * CVE-2022-21125: hw: cpu: Incomplete cleanup of microarchitectural fill buffers (aka SBDS) * CVE-2022-21166: hw: cpu: Incomplete clea...
An update for redhat-release-virtualization-host, redhat-virtualization-host, and redhat-virtualization-host-productimg is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1012: kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak * CVE-2022-2132: dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs * CVE-2022-...
Ubuntu Security Notice 5588-1 - Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service or execute arbitrary code.
Details of an eight-year-old security vulnerability in the Linux kernel have emerged that the researchers say is "as nasty as Dirty Pipe." Dubbed DirtyCred by a group of academics from Northwestern University, the security weakness exploits a previously unknown flaw (CVE-2022-2588) to escalate privileges to the maximum level. "DirtyCred is a kernel exploitation concept that swaps unprivileged