Red Hat Security AdvisoryRHSA-2022:5316
kernel security and bug fix update
Released 2022-06-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-372.13.1.el8_6, kernel-4.18.0-372.13.1.el8_6, kernel-abi-stablelists-4.18.0-372.13.1.el8_6 +19
- Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-372.13.1.el8_6
- Red Hat Virtualization 4 Hypervisor for RHEL 8 kernel-devel-4.18.0-372.13.1.el8_6, perf-4.18.0-372.13.1.el8_6
Fixes 2 records
Priority MEDIUM 42
A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.05524 · Published 2022-03-23 · Fixed CWE-787
Priority LOW 26
A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def.
CVSS 3.1MEDIUM 5.8· Physical · High privileges · No interaction · EPSS 0.00379 · Published 2020-11-18 · Partial fix CWE-125
