Red Hat Security AdvisoryRHSA-2022:0819
kernel-rt security and bug fix update
Released 2022-03-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-348.20.1.rt7.150.el8_5, kernel-rt-core-4.18.0-348.20.1.rt7.150.el8_5, kernel-rt-debug-4.18.0-348.20.1.rt7.150.el8_5 +9
- Red Hat Enterprise Linux for Real Time (v. 8) kernel-rt-4.18.0-348.20.1.rt7.150.el8_5, kernel-rt-core-4.18.0-348.20.1.rt7.150.el8_5, kernel-rt-debug-4.18.0-348.20.1.rt7.150.el8_5 +7
Fixes 7 records
Priority CRITICAL 93KEV
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.92795 · Published 2022-03-07 · Fixed CWE-665
Priority CRITICAL 93KEV
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.05528 · Published 2022-03-03 · Fixed CWE-287
Priority CRITICAL 88KEV
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition.
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00867 · Published 2021-12-15 · Fixed CWE-416
Priority HIGH 75
A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.6777 · Published 2022-03-25 · Fixed CWE-787
Priority MEDIUM 40
A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.01216 · Published 2022-02-04 · Fixed CWE-416
Priority LOW 39
The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling 'file' pointer.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02558 · Published 2023-12-13 · Partial fix CWE-416
Priority LOW 34
A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00382 · Published 2022-03-25 · Fixed CWE-281
THREATIST.IORead the docs