MGASA-2022-0027 - Updated kernel-linus packages fix security vulnerability Publication date: 21 Jan 2022 URL: https://advisories.mageia.org/MGASA-2022-0027.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-0185 This kernel-linus update is based on upstream 5.15.16 and fixes atleast the following security issue: William Liu and Jamie Hill-Daniel discovered that the file system context functionality in the Linux kernel contained an integer underflow vulnerability, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code (CVE-2022-0185). References: - https://bugs.mageia.org/show_bug.cgi?id=29917 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.16 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0185 SRPMS: - 8/core/kernel-linus-5.15.16-1.mga8