Red Hat Security AdvisoryRHSA-2022:0188
kernel security and bug fix update
Released 2022-01-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-348.12.2.el8_5
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-348.12.2.el8_5, kernel-4.18.0-348.12.2.el8_5, kernel-abi-stablelists-4.18.0-348.12.2.el8_5 +18
Fixes 2 records
Priority CRITICAL 96KEV
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.25151 · Published 2022-02-11 · Fixed CWE-190
Priority LOW 25
A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00302 · Published 2022-08-24 · Fixed CWE-131
