Red Hat Security AdvisoryRHSA-2022:6003
kernel security, bug fix, and enhancement update
Released 2022-08-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-70.22.1.el9_0
- Red Hat Enterprise Linux AppStream (v. 9) kernel-debug-devel-5.14.0-70.22.1.el9_0, kernel-debug-devel-matched-5.14.0-70.22.1.el9_0, kernel-devel-5.14.0-70.22.1.el9_0 +5
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-5.14.0-70.22.1.el9_0, kernel-5.14.0-70.22.1.el9_0, kernel-abi-stablelists-5.14.0-70.22.1.el9_0 +14
Fixes 4 records
Priority HIGH 72
A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation.
CVSS 4.0HIGH 8.6· Local · Low privileges · No interaction · EPSS 0.00504 · Published 2022-03-29 · Fixed in 5.4.177, 5.10.97 +3 CWE-416
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix free of uninitialized nfs4_label on referral lookup.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0053 · Published 2025-02-26 · Partial fix · 5.18.3, 5.19 CWE-908
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: make apf token non-zero to fix bug In current async pagefault logic, when a page is ready, KVM relies on kvm_arch_can_dequeue_async_page_p…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00247 · Published 2024-08-22 · Partial fix · 5.10.103, 5.15.26 +2
Priority LOW 21
A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00416 · Published 2022-03-25 · Partial fix CWE-200
THREATIST.IORead the docs