Headline
Red Hat Security Advisory 2023-1130-01
Red Hat Security Advisory 2023-1130-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include null pointer and use-after-free vulnerabilities.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
=====================================================================
Red Hat Security Advisory
Synopsis: Important: kernel security and bug fix update
Advisory ID: RHSA-2023:1130-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2023:1130
Issue date: 2023-03-07
CVE Names: CVE-2022-2964 CVE-2022-4269 CVE-2022-41222
=====================================================================
- Summary:
An update for kernel is now available for Red Hat Enterprise Linux 8.6
Extended Update Support.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
- Relevant releases/architectures:
Red Hat CodeReady Linux Builder EUS (v.8.6) - aarch64, ppc64le, x86_64
Red Hat Enterprise Linux BaseOS EUS (v.8.6) - aarch64, noarch, ppc64le, s390x, x86_64
- Description:
The kernel packages contain the Linux kernel, the core of any Linux
operating system.
Security Fix(es):
kernel: memory corruption in AX88179_178A based USB ethernet device.
(CVE-2022-2964)kernel: mm/mremap.c use-after-free vulnerability (CVE-2022-41222)
kernel: net: CPU soft lockup in TC mirred egress-to-ingress action
(CVE-2022-4269)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
Bug Fix(es):
WARNING: CPU: 116 PID: 3440 at arch/x86/mm/extable.c:105
ex_handler_fprestore+0x3f/0x50 (BZ#2134587)fix for “CoW after fork() issue” aka “vmsplice child -> parent attack”
aka “GUP after fork bug” (BZ#2137546)Hardware error: RIP: copy_user_enhanced_fast_string+0xe (BZ#2137593)
i40e: orphaned-leaky memory when interacting with driver memory
parameters (BZ#2138206)RHEL 8.7 - Outputs of lsmem, lparstat, numactl and /proc/meminfo show
wrong value of memory when LMB size is set to 4GB. (BZ#2140091)RHEL8.7: tcp sessions hanging after ibmvnic failover on Denali
(BZ#2140958)RHEL8: Practically limit “Dummy wait” workaround to old Intel systems
(BZ#2142171)RHEL:8.6+ IBM Partner issue - Loopback driver with ABORT_TASKS causing
hangs in scsi eh, this bug was cloned for RHEL8.6 and need this patch in
8.6+ (BZ#2144584)i40e,iavf: SR-IOV VF devices send GARP with wrong MAC address
(BZ#2149746)RHEL8.4 - boot: Add secure boot trailer (BZ#2151531)
error 524 from seccomp(2) when trying to load filter (BZ#2152139)
The “kernel BUG at mm/usercopy.c:103!” from BZ 2041529 is back on
rhel-8.5 (BZ#2153231)kernel BUG: scheduling while atomic: crio/7295/0x00000002 (BZ#2154461)
MSFT MANA NET Patch RHEL-8: Fix race on per-CQ variable napi_iperf panic
fix (BZ#2155438)GSS: OCP 4.10.30 node crash after ODF upgrade : unable to handle kernel
NULL pointer dereference at 0000000000000000 :
ceph_get_snap_realm+0x68/0xa0 [ceph] (BZ#2155798)RHEL8.8: Backport upstream patches to reduce memory cgroup memory
consumption and OOM problem (BZ#2157923)‘date’ command shows wrong time in nested KVM s390x guest (BZ#2158814)
Kernel FIPS-140-3 requirements - part 3 - AES-XTS (BZ#2160173)
ethtool -m results in an out-of-bounds slab write in the be2net driver
(BZ#2160183)i40e/iavf: VF reset task fails “Never saw reset” with 5 second timeout
per VF (BZ#2160461)Mellanox: backport “net/mlx5e: TC NIC mode, fix tc chains miss table”
(BZ#2161630)Kernel panic observed during VxFS module unload (BZ#2162764)
iavf: It takes long time to create multiple VF interfaces and the VF
interface names are not consistent (BZ#2163259)In FIPS mode, the kernel should reject SHA-224, SHA-384, SHA-512-224, and
SHA-512-256 as hashes for hash-based DRBGs, or provide an indicator after
2023-05-16 (BZ#2165133)panic in fib6_rule_suppress+0x22 with custom xdp prog involved in
(BZ#2167604)net/mlx5e: Fix use-after-free when reverting termination table
(BZ#2167641)Update intel_idle for Eaglestream/Sapphire Rapids support (BZ#2168357)
GSS: Set of fixes in ceph kernel module to prevent OCS node kernel crash
- blocklist the kclient when receiving corrupted snap trace (BZ#2168898)
- Solution:
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.
- Bugs fixed (https://bugzilla.redhat.com/):
2067482 - CVE-2022-2964 kernel: memory corruption in AX88179_178A based USB ethernet device.
2138818 - CVE-2022-41222 kernel: mm/mremap.c use-after-free vulnerability
2150272 - CVE-2022-4269 kernel: net: CPU soft lockup in TC mirred egress-to-ingress action
- Package List:
Red Hat Enterprise Linux BaseOS EUS (v.8.6):
Source:
kernel-4.18.0-372.46.1.el8_6.src.rpm
aarch64:
bpftool-4.18.0-372.46.1.el8_6.aarch64.rpm
bpftool-debuginfo-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-core-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-cross-headers-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-debug-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-debug-core-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-debug-debuginfo-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-debug-devel-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-debug-modules-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-debug-modules-extra-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-debuginfo-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-debuginfo-common-aarch64-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-devel-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-headers-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-modules-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-modules-extra-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-tools-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-tools-debuginfo-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-tools-libs-4.18.0-372.46.1.el8_6.aarch64.rpm
perf-4.18.0-372.46.1.el8_6.aarch64.rpm
perf-debuginfo-4.18.0-372.46.1.el8_6.aarch64.rpm
python3-perf-4.18.0-372.46.1.el8_6.aarch64.rpm
python3-perf-debuginfo-4.18.0-372.46.1.el8_6.aarch64.rpm
noarch:
kernel-abi-stablelists-4.18.0-372.46.1.el8_6.noarch.rpm
kernel-doc-4.18.0-372.46.1.el8_6.noarch.rpm
ppc64le:
bpftool-4.18.0-372.46.1.el8_6.ppc64le.rpm
bpftool-debuginfo-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-core-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-cross-headers-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-debug-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-debug-core-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-debug-debuginfo-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-debug-devel-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-debug-modules-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-debug-modules-extra-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-debuginfo-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-debuginfo-common-ppc64le-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-devel-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-headers-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-modules-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-modules-extra-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-tools-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-tools-debuginfo-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-tools-libs-4.18.0-372.46.1.el8_6.ppc64le.rpm
perf-4.18.0-372.46.1.el8_6.ppc64le.rpm
perf-debuginfo-4.18.0-372.46.1.el8_6.ppc64le.rpm
python3-perf-4.18.0-372.46.1.el8_6.ppc64le.rpm
python3-perf-debuginfo-4.18.0-372.46.1.el8_6.ppc64le.rpm
s390x:
bpftool-4.18.0-372.46.1.el8_6.s390x.rpm
bpftool-debuginfo-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-core-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-cross-headers-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-debug-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-debug-core-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-debug-debuginfo-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-debug-devel-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-debug-modules-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-debug-modules-extra-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-debuginfo-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-debuginfo-common-s390x-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-devel-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-headers-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-modules-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-modules-extra-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-tools-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-tools-debuginfo-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-zfcpdump-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-zfcpdump-core-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-zfcpdump-debuginfo-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-zfcpdump-devel-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-zfcpdump-modules-4.18.0-372.46.1.el8_6.s390x.rpm
kernel-zfcpdump-modules-extra-4.18.0-372.46.1.el8_6.s390x.rpm
perf-4.18.0-372.46.1.el8_6.s390x.rpm
perf-debuginfo-4.18.0-372.46.1.el8_6.s390x.rpm
python3-perf-4.18.0-372.46.1.el8_6.s390x.rpm
python3-perf-debuginfo-4.18.0-372.46.1.el8_6.s390x.rpm
x86_64:
bpftool-4.18.0-372.46.1.el8_6.x86_64.rpm
bpftool-debuginfo-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-core-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-cross-headers-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-debug-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-debug-core-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-debug-debuginfo-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-debug-devel-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-debug-modules-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-debug-modules-extra-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-debuginfo-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-debuginfo-common-x86_64-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-devel-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-headers-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-modules-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-modules-extra-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-tools-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-tools-debuginfo-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-tools-libs-4.18.0-372.46.1.el8_6.x86_64.rpm
perf-4.18.0-372.46.1.el8_6.x86_64.rpm
perf-debuginfo-4.18.0-372.46.1.el8_6.x86_64.rpm
python3-perf-4.18.0-372.46.1.el8_6.x86_64.rpm
python3-perf-debuginfo-4.18.0-372.46.1.el8_6.x86_64.rpm
Red Hat CodeReady Linux Builder EUS (v.8.6):
aarch64:
bpftool-debuginfo-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-debug-debuginfo-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-debuginfo-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-debuginfo-common-aarch64-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-tools-debuginfo-4.18.0-372.46.1.el8_6.aarch64.rpm
kernel-tools-libs-devel-4.18.0-372.46.1.el8_6.aarch64.rpm
perf-debuginfo-4.18.0-372.46.1.el8_6.aarch64.rpm
python3-perf-debuginfo-4.18.0-372.46.1.el8_6.aarch64.rpm
ppc64le:
bpftool-debuginfo-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-debug-debuginfo-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-debuginfo-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-debuginfo-common-ppc64le-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-tools-debuginfo-4.18.0-372.46.1.el8_6.ppc64le.rpm
kernel-tools-libs-devel-4.18.0-372.46.1.el8_6.ppc64le.rpm
perf-debuginfo-4.18.0-372.46.1.el8_6.ppc64le.rpm
python3-perf-debuginfo-4.18.0-372.46.1.el8_6.ppc64le.rpm
x86_64:
bpftool-debuginfo-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-debug-debuginfo-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-debuginfo-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-debuginfo-common-x86_64-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-tools-debuginfo-4.18.0-372.46.1.el8_6.x86_64.rpm
kernel-tools-libs-devel-4.18.0-372.46.1.el8_6.x86_64.rpm
perf-debuginfo-4.18.0-372.46.1.el8_6.x86_64.rpm
python3-perf-debuginfo-4.18.0-372.46.1.el8_6.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2022-2964
https://access.redhat.com/security/cve/CVE-2022-4269
https://access.redhat.com/security/cve/CVE-2022-41222
https://access.redhat.com/security/updates/classification/#important
- Contact:
The Red Hat security contact is [email protected]. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2023 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=+U7d
-----END PGP SIGNATURE-----
–
RHSA-announce mailing list
[email protected]
https://listman.redhat.com/mailman/listinfo/rhsa-announce
Related news
Ubuntu Security Notice 6385-1 - It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. William Zhao discovered that the Traffic Control subsystem in the Linux kernel did not properly handle network packet retransmission in certain situations. A local attacker could use this to cause a denial of service.
Ubuntu Security Notice 6337-1 - It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service. Billy Jheng Bing Jhong discovered that the CIFS network file system implementation in the Linux kernel did not properly validate arguments to ioctl in some situations. A local attacker could possibly use this to cause a denial of service.
Ubuntu Security Notice 6314-1 - It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service. Billy Jheng Bing Jhong discovered that the CIFS network file system implementation in the Linux kernel did not properly validate arguments to ioctl in some situations. A local attacker could possibly use this to cause a denial of service.
Debian Linux Security Advisory 5480-1 - Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Ubuntu Security Notice 6284-1 - It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service. Billy Jheng Bing Jhong discovered that the CIFS network file system implementation in the Linux kernel did not properly validate arguments to ioctl in some situations. A local attacker could possibly use this to cause a denial of service.
Ubuntu Security Notice 6187-1 - William Zhao discovered that the Traffic Control subsystem in the Linux kernel did not properly handle network packet retransmission in certain situations. A local attacker could use this to cause a denial of service. It was discovered that the TUN/TAP driver in the Linux kernel did not properly initialize socket data. A local attacker could use this to cause a denial of service.
An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or poten...
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-26341: A flaw was found in hw. This issue can cause AMD CPUs to transiently execute beyond unconditional direct branches. * CVE-2021-33655: An out-of-bounds write flaw was found in the Linux kernel’s framebuffer-based console driver functionality in the way a user triggers ioctl FBIOPUT_VSCREENINFO with malicious data. This flaw allows a local user to c...
Red Hat Security Advisory 2023-2104-01 - Red Hat Advanced Cluster Management for Kubernetes 2.5.8 images Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which fix several bugs. Issues addressed include a denial of service vulnerability.
Red Hat Security Advisory 2023-2083-01 - Red Hat Advanced Cluster Management for Kubernetes 2.6.5 General Availability release images, which fix bugs and security updates container images. Issues addressed include denial of service and server-side request forgery vulnerabilities.
Red Hat Security Advisory 2023-1953-01 - Red Hat OpenShift Logging Subsystem 5.6.5 update. Issues addressed include cross site scripting and denial of service vulnerabilities.
Ubuntu Security Notice 6033-1 - It was discovered that the Traffic-Control Index implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for thisCVE, kernel support for the TCINDEX classifier has been removed. William Zhao discovered that the Traffic Control subsystem in the Linux kernel did not properly handle network packet retransmission in certain situations. A local attacker could use this to cause a denial of service.
Red Hat Security Advisory 2023-1584-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4269: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of se...
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4269: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of...
Red Hat Security Advisory 2023-1393-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.10.55.
Red Hat OpenShift Container Platform release 4.10.55 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-20329: A flaw was found in Mongo. Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshaling Go objects into BSON. This flaw allows a malicious user to use a Go object with a specific string to inject additional fields into marshaled docume...
Red Hat OpenShift Container Platform release 4.10.55 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-4238: A flaw was found in goutils where randomly generated alphanumeric strings contain significantly less entropy than expected. Both the `RandomAlphaNumeric` and `CryptoRandomAlphaNumeric` functions always return strings containing at least one digit from 0 to 9. This issu...
Red Hat Security Advisory 2023-1470-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include a double free vulnerability.
Red Hat Security Advisory 2023-1469-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include a double free vulnerability.
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4269: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of se...
An update for kernel-rt is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4269: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of...
Red Hat Security Advisory 2023-1221-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include null pointer and use-after-free vulnerabilities.
Red Hat Security Advisory 2023-1202-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include denial of service, integer overflow, and use-after-free vulnerabilities.
Red Hat Security Advisory 2023-1220-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include a use-after-free vulnerability.
Red Hat Security Advisory 2023-1203-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include denial of service, integer overflow, and use-after-free vulnerabilities.
An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. * CVE-2022-4269: A flaw was found ...
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. * CVE-2022-4269: A flaw was fou...
An update for kernel is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. * CVE-2022-4269: A flaw was found ...
An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. * CVE-2022-4269: A flaw was fou...
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2964: A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes. * CVE-2022-41222: A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space account...
Red Hat Security Advisory 2023-0932-01 - Update information for Logging Subsystem 5.6.3 in Red Hat OpenShift. Red Hat Product Security has rated this update as having a security impact of Moderate.
Red Hat Security Advisory 2023-0930-01 - Update information for Logging Subsystem 5.5.8 in Red Hat OpenShift. Red Hat Product Security has rated this update as having a security impact of Moderate.
Logging Subsystem 5.4.12 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-41717: A flaw was found in the net/http library of the golang package. This flaw allows an attacker to cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to alloc...
Logging Subsystem 5.6.3 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-24999: qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used to visit the application, such as a[__proto__]=b&...
An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2964: A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes. * CVE-2022-4269: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking co...
In addAutomaticZenRule of ZenModeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242537431
Red Hat Security Advisory 2023-0839-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Issues addressed include buffer overflow and use-after-free vulnerabilities.
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2873: An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input data. This flaw allows a local user to crash the system. * CVE-2022-41222: A use-after-free flaw was found in the Linux kernel’s mm/mremap me...
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-41222: A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code in how a race condition happens between rmap walk and mremap. This flaw allows a local user to crash or potentially escalate their privileges on the system. * CVE-2022-43945: A buffer overflow flaw was found in the Linux kernel nfsd (...
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2873: An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input data. This flaw allows a local user to crash the system. * CVE-2022-41222: A use-after-free flaw was found in the Linux kernel’s mm/mremap...
It was discovered that a race condition existed in the memory address space accounting implementation in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. Sonke Huster discovered that a use-after-free vulnerability existed in the WiFi driver stack in the Linux kernel. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
Red Hat Security Advisory 2023-0399-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system.
Red Hat Security Advisory 2023-0400-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Red Hat Security Advisory 2023-0395-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system.
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-26401: hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715 * CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device.
An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-26401: hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715 * CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device.
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device.
An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device.
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.2 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device.
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device.
Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.
A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.
A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.
Ubuntu Security Notice 5728-3 - Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that a race condition existed in the memory address space accounting implementation in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.
Ubuntu Security Notice 5728-2 - Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that a race condition existed in the memory address space accounting implementation in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.
Ubuntu Security Notice 5728-1 - Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that a race condition existed in the memory address space accounting implementation in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.
A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.