Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 552
Alerts This Week
Warning Icon 1 552

Red Hat Enterprise Linux 9: RHSA-2022:6003-01 Moderate: Kernel Security

red hat
Calendar Grey August 9, 2022
Dist Redhat Esm H88
A new kernel patch for Red Hat Enterprise Linux 9 has been released to resolve several moderate security vulnerabilities and system bugs.
An update for kernel is now available for Red Hat Enterprise Linux 9

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* information leak in scsi_ioctl() (CVE-2022-0494)
* use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Power9 - LPAR fails to boot in shared processing mode and call traces are seen [Hash] (BZ#2092248)
* Hard lockups are observed while running stress-ng and LPAR hangs (BZ#2092253)
* FIPS module identification via name and version (BZ#2093384)
* gfs2: File corruption with large writes when memory is tight (BZ#2097306)
* i/o on initiator stuck when network is disrupted (4.18.0-372.9.1.el8.x86_64) (BZ#2098251)
* RHEL 9.1 doesn't support 3rd SATA (BZ#2099740)
* Guest call trace when reboot after postcopy migration with high stress workload (BZ#2100903)
* Oops or general protection fault with RIP decode_attr_security_label at decode_getfattr_attrs (BZ#2101854)
* Oops as BUG: unable to handle page fault as free of uninitialized nfs4_label on nfs referral lookup (BZ#2101858)
* lpar crash with Oops: Kernel access of bad area, sig: 11 [#1] when changing mtu of a bond interface (P10/ ibmvnic/ Haleakala) (BZ#2103085)
* OS doesn't boot when vmd and interrupt remapping are enabled (BZ#2109974)
Enhancement(s):
* iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (BZ#2105326)

References

https://access.redhat.com/security/cve/CVE-2022-0494 https://access.redhat.com/security/cve/CVE-2022-1055 https://access.redhat.com/security/updates/classification/#moderate

Package List

Red Hat Enterprise Linux AppStream (v. 9):
aarch64: bpftool-debuginfo-5.14.0-70.22.1.el9_0.aarch64.rpm kernel-debug-debuginfo-5.14.0-70.22.1.el9_0.aarch64.rpm kernel-debug-devel-5.14.0-70.22.1.el9_0.aarch64.rpm kernel-debug-devel-matched-5.14.0-70.22.1.el9_0.aarch64.rpm kernel-debuginfo-5.14.0-70.22.1.el9_0.aarch64.rpm kernel-debuginfo-common-aarch64-5.14.0-70.22.1.el9_0.aarch64.rpm kernel-devel-5.14.0-70.22.1.el9_0.aarch64.rpm kernel-devel-matched-5.14.0-70.22.1.el9_0.aarch64.rpm kernel-headers-5.14.0-70.22.1.el9_0.aarch64.rpm kernel-tools-debuginfo-5.14.0-70.22.1.el9_0.aarch64.rpm perf-5.14.0-70.22.1.el9_0.aarch64.rpm perf-debuginfo-5.14.0-70.22.1.el9_0.aarch64.rpm python3-perf-debuginfo-5.14.0-70.22.1.el9_0.aarch64.rpm
noarch: kernel-doc-5.14.0-70.22.1.el9_0.noarch.rpm
ppc64le: bpftool-debuginfo-5.14.0-70.22.1.el9_0.ppc64le.rpm kernel-debug-debuginfo-5.14.0-70.22.1.el9_0.ppc64le.rpm kernel-debug-devel-5.14.0-70.22.1.el9_0.ppc64le.rpm kernel-debug-devel-matched-5.14.0-70.22.1.el9_0.ppc64le.rpm kernel-debuginfo-5.14.0-70.22.1.el9_0.ppc64le.rpm kernel-debuginfo-common-ppc64le-5.14.0-70.22.1.el9_0.ppc64le.rpm kernel-devel-5.14.0-70.22.1.el9_0.ppc64le.rpm kernel-devel-matched-5.14.0-70.22.1.el9_0.ppc64le.rpm kernel-headers-5.14.0-70.22.1.el9_0.ppc64le.rpm

Read the Full Advisory


Severity
important
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2022:6003-01
Product: Red Hat Enterprise Linux
Issue date: 2022-08-09

Topic

An update for kernel is now available for Red Hat Enterprise Linux 9.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Relevant Releases Architectures

Red Hat CodeReady Linux Builder (v. 9) - aarch64, ppc64le, s390x, x86_64

Red Hat Enterprise Linux AppStream (v. 9) - aarch64, noarch, ppc64le, s390x, x86_64

Red Hat Enterprise Linux BaseOS (v. 9) - aarch64, noarch, ppc64le, s390x, x86_64

Bugs Fixed

2039448 - CVE-2022-0494 kernel: information leak in scsi_ioctl()

2070220 - CVE-2022-1055 kernel: use-after-free in tc_new_tfilter() in net/sched/cls_api.c

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.