Red Hat Security AdvisoryRHSA-2022:4829
kernel security, bug fix, and enhancement update
Released 2022-05-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS EUS (v.8.4) bpftool-4.18.0-305.49.1.el8_4, kernel-4.18.0-305.49.1.el8_4, kernel-abi-stablelists-4.18.0-305.49.1.el8_4 +19
- Red Hat Enterprise Linux CRB EUS (v.8.4) kernel-tools-libs-devel-4.18.0-305.49.1.el8_4
Fixes 3 records
Priority MEDIUM 42
A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.05524 · Published 2022-03-23 · Fixed CWE-787
Priority MEDIUM 42
A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.06902 · Published 2022-02-18 · Partial fix · 4.19.215, 5.4.146 +3 CWE-330
Priority LOW 34
A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group executio…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00337 · Published 2022-08-24 · Fixed in 5.4.241, 5.10.146 +5 CWE-284
THREATIST.IORead the docs