Red Hat Security AdvisoryRHSA-2022:1209
kernel-rt security and bug fix update
Released 2022-04-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Real Time EUS (v. 8.2) kernel-rt-4.18.0-193.80.1.rt13.130.el8_2, kernel-rt-core-4.18.0-193.80.1.rt13.130.el8_2, kernel-rt-debug-4.18.0-193.80.1.rt13.130.el8_2 +7
- Red Hat Enterprise Linux Real Time for NFV EUS (v. 8.2) kernel-rt-4.18.0-193.80.1.rt13.130.el8_2, kernel-rt-core-4.18.0-193.80.1.rt13.130.el8_2, kernel-rt-debug-4.18.0-193.80.1.rt13.130.el8_2 +9
Fixes 3 records
Priority HIGH 75
A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.6777 · Published 2022-03-25 · Fixed CWE-787
Priority LOW 27
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.
CVSS 3.1MEDIUM 5.9· Physical · Low privileges · No interaction · EPSS 0.00488 · Published 2020-02-06 · Partial fix CWE-416
Priority LOW 27
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c.
CVSS 3.1MEDIUM 6.1· Local · Low privileges · No interaction · EPSS 0.00404 · Published 2020-02-06 · Partial fix CWE-416
THREATIST.IORead the docs