Red Hat Security Advisory

RHSA-2022:0186

kernel security, bug fix, and enhancement update

Released 2022-01-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v.8.4) bpftool-4.18.0-305.34.2.el8_4, kernel-4.18.0-305.34.2.el8_4, kernel-abi-stablelists-4.18.0-305.34.2.el8_4 +19
Red Hat Enterprise Linux CRB EUS (v.8.4) kernel-tools-libs-devel-4.18.0-305.34.2.el8_4

Fixes 3 records

TI-2022-00125 CVE-2022-0185

Integer overflow in kernel

CRITICAL 96KEV

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.25151 Published 2022-02-11 Fixed CWE-190

TI-2021-03025 CVE-2021-4154 · GHSA-qvm5-4fh7-hcfx

Use after free in kernel

MEDIUM 40

A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01216 Published 2022-02-04 Fixed CWE-416

TI-2021-03026 CVE-2021-4155

A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed…

LOW 25

A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00302 Published 2022-08-24 Fixed CWE-131