Red Hat Security Advisory

RHSA-2022:1185

kpatch-patch security update

Released 2022-04-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7) kpatch-patch-3_10_0-1160_24_1-1-8.el7, kpatch-patch-3_10_0-1160_25_1-1-8.el7, kpatch-patch-3_10_0-1160_31_1-1-7.el7 +7

Fixes 2 records

TI-2021-02917 CVE-2021-4028 · GHSA-qfcc-9m6r-r23m

Use after free in kernel

LOW 34

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00318 Published 2022-08-24 Partial fix CWE-416

TI-2021-02966 CVE-2021-4083 · GHSA-rcrv-64p3-px35

Use after free in kernel

LOW 31

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0031 Published 2022-01-18 Fixed CWE-416