MGASA-2022-0026 - Updated kernel packages fix security vulnerability Publication date: 21 Jan 2022 URL: https://advisories.mageia.org/MGASA-2022-0026.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-0185 This kernel update is based on upstream 5.15.16 and fixes atleast the following security issue: William Liu and Jamie Hill-Daniel discovered that the file system context functionality in the Linux kernel contained an integer underflow vulnerability, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code (CVE-2022-0185). References: - https://bugs.mageia.org/show_bug.cgi?id=29916 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.16 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0185 SRPMS: - 8/core/kernel-5.15.16-1.mga8 - 8/core/kmod-virtualbox-6.1.30-1.14.mga8 - 8/core/kmod-xtables-addons-3.18-1.48.mga8