Red Hat Security AdvisoryRHSA-2022:1324
kernel security and bug fix update
Released 2022-04-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.7) bpftool-3.10.0-1062.66.1.el7, kernel-3.10.0-1062.66.1.el7, kernel-abi-whitelists-3.10.0-1062.66.1.el7 +8
- Red Hat Enterprise Linux Server E4S (v. 7.7) bpftool-3.10.0-1062.66.1.el7, kernel-3.10.0-1062.66.1.el7, kernel-abi-whitelists-3.10.0-1062.66.1.el7 +9
- Red Hat Enterprise Linux Server Optional AUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.66.1.el7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.7) kernel-debug-devel-3.10.0-1062.66.1.el7, kernel-tools-libs-devel-3.10.0-1062.66.1.el7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.66.1.el7
- Red Hat Enterprise Linux Server TUS (v. 7.7) bpftool-3.10.0-1062.66.1.el7, kernel-3.10.0-1062.66.1.el7, kernel-abi-whitelists-3.10.0-1062.66.1.el7 +8
Fixes 4 records
Priority CRITICAL 88KEV
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition.
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00867 · Published 2021-12-15 · Fixed CWE-416
Priority LOW 39
The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling 'file' pointer.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02558 · Published 2023-12-13 · Partial fix CWE-416
Priority LOW 34
A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00318 · Published 2022-08-24 · Partial fix CWE-416
Priority LOW 31
A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.0031 · Published 2022-01-18 · Fixed CWE-416