Red Hat Security AdvisoryRHSA-2022:1198
kernel security, bug fix, and enhancement update
Released 2022-04-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1160.62.1.el7, kernel-3.10.0-1160.62.1.el7, kernel-abi-whitelists-3.10.0-1160.62.1.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.62.1.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.62.1.el7
- Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1160.62.1.el7, kernel-3.10.0-1160.62.1.el7, kernel-abi-whitelists-3.10.0-1160.62.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1160.62.1.el7, kernel-tools-libs-devel-3.10.0-1160.62.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1160.62.1.el7, kernel-3.10.0-1160.62.1.el7, kernel-abi-whitelists-3.10.0-1160.62.1.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.62.1.el7
Fixes 2 records
Priority LOW 34
A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00318 · Published 2022-08-24 · Partial fix CWE-416
Priority LOW 31
A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.0031 · Published 2022-01-18 · Fixed CWE-416
