Red Hat Security Advisory

RHSA-2022:0231

kpatch-patch security update

Released 2022-01-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v.8.4) kpatch-patch-4_18_0-305-1-10.el8, kpatch-patch-4_18_0-305_10_2-1-7.el8_4, kpatch-patch-4_18_0-305_12_1-1-6.el8_4 +7

Fixes 3 records

TI-2022-00125 CVE-2022-0185

Integer overflow in kernel

CRITICAL 96KEV

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.25151 Published 2022-02-11 Fixed CWE-190

TI-2021-03025 CVE-2021-4154 · GHSA-qvm5-4fh7-hcfx

Use after free in kernel

MEDIUM 40

A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01216 Published 2022-02-04 Fixed CWE-416

TI-2021-03026 CVE-2021-4155

A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed…

LOW 25

A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00302 Published 2022-08-24 Fixed CWE-131