Red Hat Security AdvisoryRHSA-2022:0063
kernel security and bug fix update
Released 2022-01-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1160.53.1.el7, kernel-3.10.0-1160.53.1.el7, kernel-abi-whitelists-3.10.0-1160.53.1.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.53.1.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.53.1.el7
- Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1160.53.1.el7, kernel-3.10.0-1160.53.1.el7, kernel-abi-whitelists-3.10.0-1160.53.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1160.53.1.el7, kernel-tools-libs-devel-3.10.0-1160.53.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1160.53.1.el7, kernel-3.10.0-1160.53.1.el7, kernel-abi-whitelists-3.10.0-1160.53.1.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.53.1.el7
Fixes 3 records
Priority LOW 30
The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandles bounds checking.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00473 · Published 2021-10-20 · Partial fix CWE-787
Priority LOW 25
An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00378 · Published 2021-04-14 · Partial fix CWE-459
Priority LOW 25
A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00353 · Published 2020-12-02 · Partial fix CWE-401
