RHSA-2022:0186: Important: kernel security, bug fix, and enhancement update

Published Jan 19, 2022
·
Updated

The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout (CVE-2021-4154) kernel: xfs: raw block device data leak in XFSIOCALLOCSP IOCTL (CVE-2021-4155) kernel: fscontext: heap overflow in legacy parameter handling (CVE-2022-0185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): ionic upstream bug fix - linearize skb with too many frags (BZ#1952077) kernel show “ BUG: scheduling while atomic:xxx“ and reboot when an uncorrectable memory error injection on RHEL8.4 beta and GA (BZ#2003993) [RHEL 8.3] Discard request from mkfs.xfs takes too much time on raid10 (BZ#2020418) CNB: Rebase/update TC subsystem for RHEL 8.5 (BZ#2021644) Proactively Backport MM fixes for el8.5 - 2nd round (BZ#2023923) [RHEL-8.6][SanityOnly] Backport leftover migratedisable BPF related change (BZ#2027688) Backport kernel audit enhancements and fixes from v5.10 to v5.13-rc1 (BZ#2028871) Proactively Backport MM fixes for el8.5 (BZ#2029383) iommu/amd: Fix unable to handle page fault due to AVIC (BZ#2030853) RCU stall WARNING: at kernel/rcu/tree.c:1392 rcuadvancecbsnowake+0x51/0x60 (BZ#2032578) PTP "clock jumped backward or running slower than expected!" in OpenShift 4.8 environment with Intel E810 (BZ#2037834) Enhancement(s): [Mellanox 8.5 FEAT] mlx5: drivers update upto Linux v5.12 (BZ#2023918)

Affected Software

105 affected componentsFixes available
redhat/kernel<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/bpftool<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/bpftool-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-abi-stablelists<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-core<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-cross-headers<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug-core<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug-devel<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug-modules<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug-modules-extra<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-devel<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-doc<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-headers<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-modules<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-modules-extra<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-tools<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-tools-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-tools-libs<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/perf<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/perf-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/python3-perf<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/python3-perf-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/bpftool<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/bpftool-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-core<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-cross-headers<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug-core<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug-devel<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug-modules<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug-modules-extra<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debuginfo-common-s390x<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-devel<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-headers<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-modules<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-modules-extra<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-tools<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-tools-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-zfcpdump<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-zfcpdump-core<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-zfcpdump-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-zfcpdump-devel<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-zfcpdump-modules<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-zfcpdump-modules-extra<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/perf<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/perf-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/python3-perf<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/python3-perf-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/bpftool<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/bpftool-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-core<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-cross-headers<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug-core<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug-devel<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug-modules<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debug-modules-extra<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-debuginfo-common-ppc64le<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-devel<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-headers<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-modules<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-modules-extra<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-tools<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-tools-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-tools-libs<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/perf<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/perf-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/python3-perf<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/python3-perf-debuginfo<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/bpftool<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/bpftool-debuginfo<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-core<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-cross-headers<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-debug<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-debug-core<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-debug-debuginfo<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-debug-devel<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-debug-modules<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-debug-modules-extra<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-debuginfo<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-debuginfo-common-aarch64<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-devel<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-headers<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-modules<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-modules-extra<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-tools<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-tools-debuginfo<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-tools-libs<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/perf<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/perf-debuginfo<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/python3-perf<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/python3-perf-debuginfo<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa
redhat/kernel-tools-libs-devel<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-tools-libs-devel<4.18.0-305.34.2.el8_4
4.18.0-305.34.2.el8_4
redhat/kernel-tools-libs-devel<4.18.0-305.34.2.el8_4.aa
4.18.0-305.34.2.el8_4.aa

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  2. Upgrade

    Upgrade redhat/bpftool to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  3. Upgrade

    Upgrade redhat/bpftool-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  4. Upgrade

    Upgrade redhat/kernel-abi-stablelists to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  5. Upgrade

    Upgrade redhat/kernel-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  6. Upgrade

    Upgrade redhat/kernel-cross-headers to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  7. Upgrade

    Upgrade redhat/kernel-debug to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  8. Upgrade

    Upgrade redhat/kernel-debug-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  9. Upgrade

    Upgrade redhat/kernel-debug-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  10. Upgrade

    Upgrade redhat/kernel-debug-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  11. Upgrade

    Upgrade redhat/kernel-debug-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  12. Upgrade

    Upgrade redhat/kernel-debug-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  13. Upgrade

    Upgrade redhat/kernel-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  14. Upgrade

    Upgrade redhat/kernel-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  15. Upgrade

    Upgrade redhat/kernel-doc to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  16. Upgrade

    Upgrade redhat/kernel-headers to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  17. Upgrade

    Upgrade redhat/kernel-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  18. Upgrade

    Upgrade redhat/kernel-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  19. Upgrade

    Upgrade redhat/kernel-tools to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  20. Upgrade

    Upgrade redhat/kernel-tools-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  21. Upgrade

    Upgrade redhat/kernel-tools-libs to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  22. Upgrade

    Upgrade redhat/perf to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  23. Upgrade

    Upgrade redhat/perf-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  24. Upgrade

    Upgrade redhat/python3-perf to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  25. Upgrade

    Upgrade redhat/python3-perf-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  26. Upgrade

    Upgrade redhat/kernel-debuginfo-common-s390x to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  27. Upgrade

    Upgrade redhat/kernel-zfcpdump to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  28. Upgrade

    Upgrade redhat/kernel-zfcpdump-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  29. Upgrade

    Upgrade redhat/kernel-zfcpdump-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  30. Upgrade

    Upgrade redhat/kernel-zfcpdump-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  31. Upgrade

    Upgrade redhat/kernel-zfcpdump-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  32. Upgrade

    Upgrade redhat/kernel-zfcpdump-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  33. Upgrade

    Upgrade redhat/kernel-debuginfo-common-ppc64le to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  34. Upgrade

    Upgrade redhat/bpftool to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  35. Upgrade

    Upgrade redhat/bpftool-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  36. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  37. Upgrade

    Upgrade redhat/kernel-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  38. Upgrade

    Upgrade redhat/kernel-cross-headers to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  39. Upgrade

    Upgrade redhat/kernel-debug to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  40. Upgrade

    Upgrade redhat/kernel-debug-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  41. Upgrade

    Upgrade redhat/kernel-debug-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  42. Upgrade

    Upgrade redhat/kernel-debug-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  43. Upgrade

    Upgrade redhat/kernel-debug-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  44. Upgrade

    Upgrade redhat/kernel-debug-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  45. Upgrade

    Upgrade redhat/kernel-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  46. Upgrade

    Upgrade redhat/kernel-debuginfo-common-aarch64 to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  47. Upgrade

    Upgrade redhat/kernel-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  48. Upgrade

    Upgrade redhat/kernel-headers to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  49. Upgrade

    Upgrade redhat/kernel-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  50. Upgrade

    Upgrade redhat/kernel-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  51. Upgrade

    Upgrade redhat/kernel-tools to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  52. Upgrade

    Upgrade redhat/kernel-tools-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  53. Upgrade

    Upgrade redhat/kernel-tools-libs to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  54. Upgrade

    Upgrade redhat/perf to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  55. Upgrade

    Upgrade redhat/perf-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  56. Upgrade

    Upgrade redhat/python3-perf to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  57. Upgrade

    Upgrade redhat/python3-perf-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  58. Upgrade

    Upgrade redhat/kernel-tools-libs-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4
  59. Upgrade

    Upgrade redhat/kernel-tools-libs-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.34.2.el8_4.aa
  60. Upgrade

    Upgrade Red Hat Enterprise Linux kernel (RHEL kernel packages) to a version that resolves this vulnerability.

    Patch BZ#2028871
  61. Upgrade

    Upgrade Red Hat Enterprise Linux kernel (RHEL kernel packages) to a version that resolves this vulnerability.

    Patch BZ#2021644
  62. Upgrade

    Upgrade Red Hat Enterprise Linux kernel (RHEL kernel packages) to a version that resolves this vulnerability.

    Patch BZ#2037834
  63. Upgrade

    Upgrade Red Hat Enterprise Linux kernel (RHEL kernel packages) to a version that resolves this vulnerability.

    Patch BZ#2029383
  64. Upgrade

    Upgrade Red Hat Enterprise Linux kernel (RHEL kernel packages) to a version that resolves this vulnerability.

    Patch BZ#2023923
  65. Upgrade

    Upgrade Red Hat Enterprise Linux kernel (RHEL kernel packages) to a version that resolves this vulnerability.

    Patch BZ#2032578
  66. Upgrade

    Upgrade Red Hat Enterprise Linux kernel (RHEL kernel packages) to a version that resolves this vulnerability.

    Patch BZ#2020418
  67. Upgrade

    Upgrade Red Hat Enterprise Linux kernel (RHEL kernel packages) to a version that resolves this vulnerability.

    Patch BZ#2027688
  68. Upgrade

    Upgrade Red Hat Enterprise Linux kernel (RHEL kernel packages) to a version that resolves this vulnerability.

    Patch BZ#2030853
  69. Upgrade

    Upgrade Red Hat Enterprise Linux kernel (RHEL kernel packages) to a version that resolves this vulnerability.

    Patch BZ#2003993
  70. Upgrade

    Upgrade Red Hat Enterprise Linux kernel (RHEL kernel packages) to a version that resolves this vulnerability.

    Patch CVE-2022-0185
  71. Upgrade

    Upgrade Red Hat Enterprise Linux kernel (RHEL kernel packages) to a version that resolves this vulnerability.

    Patch CVE-2021-4155
  72. Upgrade

    Upgrade Mellanox mlx5 driver (for RHEL 8.5 FEAT) to a version that resolves this vulnerability.

    Patch BZ#2023918
  73. Upgrade

    Upgrade ionic driver to a version that resolves this vulnerability.

    Patch BZ#1952077
  74. Upgrade

    Upgrade Red Hat Enterprise Linux kernel (RHEL kernel packages) to a version that resolves this vulnerability.

    Patch CVE-2021-4154
  75. Operational

    Reboot the system after installing the kernel update so the update takes effect.

Event History

Feb 11, 2026
Advisory Published
via Red Hat·04:46 PM
Data Sourced
via Red Hat·04:46 PM
RemedyDescriptionAffected Software

Frequently Asked Questions

1

What is the severity of RHSA-2022:0186?

The severity of RHSA-2022:0186 is categorized as important due to the local privilege escalation vulnerability.

2

How do I fix RHSA-2022:0186?

To fix RHSA-2022:0186, update your kernel to version 4.18.0-305.34.2.el8_4 or higher.

3

What vulnerabilities are addressed in RHSA-2022:0186?

RHSA-2022:0186 addresses a local privilege escalation vulnerability related to the fsconfig syscall parameter (CVE-2021-4154).

4

Which systems are affected by RHSA-2022:0186?

RHSA-2022:0186 affects systems running the kernel versions below 4.18.0-305.34.2.el8_4.

5

Is there a workaround for RHSA-2022:0186?

There are no known workarounds for RHSA-2022:0186; upgrading is the recommended mitigation.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203