Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 8: MGASA-2022-0229 Moderate: Kernel Privilege Escalation

mageia
Calendar Grey June 13, 2022
Dist Mageia Esm H88
Mageia kernel revision MGASA-2022-0230 resolves several high-priority security vulnerabilities on July 15, 2022.
This kernel update is based on upstream 5.15.46 and fixes at least the following security issues: KVM: x86: avoid calling x86 emulator without a decoded instruction (CVE-2022-1852...

Summary

This kernel update is based on upstream 5.15.46 and fixes at least the following security issues:
KVM: x86: avoid calling x86 emulator without a decoded instruction (CVE-2022-1852).
A use-after-free vulnerability was found in the Linux kernel's Netfilter subsystem in net/netfilter/nf_tables_api.c. This flaw allows a local attacker with user access to cause a privilege escalation issue (CVE-2022-1966).
An out-of-bound write vulnerability was identified within the netfilter subsystem which can be exploited to achieve privilege escalation to root. In order to trigger the issue it requires the ability to create user/net namespaces (CVE-2022-1972).
fs/ntfs3: Fix invalid free in log_replay (CVE-2022-1973).
Other fixes in this update: - x86/amd_nb: Add AMD Family 17h A0-AF IDs - x86/amd_nb: Add Family 19h model 70h-7Fh IDs - x86/amd_nb: Add Family 19h model 60h-6Fh IDs - hwmon: (k10temp): Add support for family 17h models A0h-AFh - hwmon: (k10temp): Add support for family 19h models 70h-7F...

Read the Full Advisory

References

- https://bugs.mageia.org/show_bug.cgi?id=30536

- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.44

- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.45

- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.46

- https://www.cve.org/CVERecord?id=CVE-2022-1852

- https://www.cve.org/CVERecord?id=CVE-2022-1966

- https://www.cve.org/CVERecord?id=CVE-2022-1972

- https://www.cve.org/CVERecord?id=CVE-2022-1973

Resolution

SRPMS

- 8/core/kernel-5.15.46-1.mga8

- 8/core/kmod-virtualbox-6.1.34-1.14.mga8

- 8/core/kmod-xtables-addons-3.20-1.12.mga8

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 13 Jun 2022
URL: https://advisories.mageia.org/MGASA-2022-0229.html
Type: security
CVE: CVE-2022-1852, CVE-2022-1966, CVE-2022-1972, CVE-2022-1973

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here