RHSA-2022:0533: Important: kpatch-patch security update
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.<br>Security Fix(es):<br><li> kernel: use after free in eventpoll.c may lead to escalation of privilege (CVE-2020-0466)</li> <li> kernel: xfs: raw block device data leak in XFSIOCALLOCSP IOCTL (CVE-2021-4155)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:0533?
The severity of RHSA-2022:0533 is classified as critical due to potential privilege escalation vulnerabilities.
How do I fix RHSA-2022:0533?
To fix RHSA-2022:0533, you should update the kpatch-patch package to the latest version specified in the advisory.
What vulnerabilities does RHSA-2022:0533 address?
RHSA-2022:0533 addresses vulnerabilities including a use after free in eventpoll.c that can lead to privilege escalation.
Which versions of kpatch-patch are affected by RHSA-2022:0533?
Affected versions of kpatch-patch under RHSA-2022:0533 include 3_10_0-957_70_1-1-7.el7 to 3_10_0-957_86_1-debuginfo-1-1.el7.
What is the main purpose of the update in RHSA-2022:0533?
The main purpose of the update in RHSA-2022:0533 is to enhance the security of the kernel by fixing critical vulnerabilities.