First published: Tue Feb 22 2022(Updated: )
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.<br>Security Fix(es):<br><li> kernel: use after free in eventpoll.c may lead to escalation of privilege (CVE-2020-0466)</li> <li> kernel: Use After Free in unix_gc() which could result in a local privilege escalation (CVE-2021-0920)</li> <li> kernel: xfs: raw block device data leak in XFS_IOC_ALLOCSP IOCTL (CVE-2021-4155)</li> <li> kernel: possible privileges escalation due to missing TLB flush (CVE-2022-0330)</li> <li> kernel: failing usercopy allows for use-after-free exploitation (CVE-2022-22942)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/kpatch-patch | <3_10_0-1160_21_1-1-9.el7 | 3_10_0-1160_21_1-1-9.el7 |
redhat/kpatch-patch | <3_10_0-1160_24_1-1-7.el7 | 3_10_0-1160_24_1-1-7.el7 |
redhat/kpatch-patch | <3_10_0-1160_25_1-1-7.el7 | 3_10_0-1160_25_1-1-7.el7 |
redhat/kpatch-patch | <3_10_0-1160_31_1-1-6.el7 | 3_10_0-1160_31_1-1-6.el7 |
redhat/kpatch-patch | <3_10_0-1160_36_2-1-5.el7 | 3_10_0-1160_36_2-1-5.el7 |
redhat/kpatch-patch | <3_10_0-1160_41_1-1-4.el7 | 3_10_0-1160_41_1-1-4.el7 |
redhat/kpatch-patch | <3_10_0-1160_42_2-1-3.el7 | 3_10_0-1160_42_2-1-3.el7 |
redhat/kpatch-patch | <3_10_0-1160_45_1-1-2.el7 | 3_10_0-1160_45_1-1-2.el7 |
redhat/kpatch-patch | <3_10_0-1160_49_1-1-1.el7 | 3_10_0-1160_49_1-1-1.el7 |
redhat/kpatch-patch | <3_10_0-1160_53_1-1-1.el7 | 3_10_0-1160_53_1-1-1.el7 |
redhat/kpatch-patch | <3_10_0-1160_21_1-1-9.el7 | 3_10_0-1160_21_1-1-9.el7 |
redhat/kpatch-patch | <3_10_0-1160_21_1-debuginfo-1-9.el7 | 3_10_0-1160_21_1-debuginfo-1-9.el7 |
redhat/kpatch-patch | <3_10_0-1160_24_1-1-7.el7 | 3_10_0-1160_24_1-1-7.el7 |
redhat/kpatch-patch | <3_10_0-1160_24_1-debuginfo-1-7.el7 | 3_10_0-1160_24_1-debuginfo-1-7.el7 |
redhat/kpatch-patch | <3_10_0-1160_25_1-1-7.el7 | 3_10_0-1160_25_1-1-7.el7 |
redhat/kpatch-patch | <3_10_0-1160_25_1-debuginfo-1-7.el7 | 3_10_0-1160_25_1-debuginfo-1-7.el7 |
redhat/kpatch-patch | <3_10_0-1160_31_1-1-6.el7 | 3_10_0-1160_31_1-1-6.el7 |
redhat/kpatch-patch | <3_10_0-1160_31_1-debuginfo-1-6.el7 | 3_10_0-1160_31_1-debuginfo-1-6.el7 |
redhat/kpatch-patch | <3_10_0-1160_36_2-1-5.el7 | 3_10_0-1160_36_2-1-5.el7 |
redhat/kpatch-patch | <3_10_0-1160_36_2-debuginfo-1-5.el7 | 3_10_0-1160_36_2-debuginfo-1-5.el7 |
redhat/kpatch-patch | <3_10_0-1160_41_1-1-4.el7 | 3_10_0-1160_41_1-1-4.el7 |
redhat/kpatch-patch | <3_10_0-1160_41_1-debuginfo-1-4.el7 | 3_10_0-1160_41_1-debuginfo-1-4.el7 |
redhat/kpatch-patch | <3_10_0-1160_42_2-1-3.el7 | 3_10_0-1160_42_2-1-3.el7 |
redhat/kpatch-patch | <3_10_0-1160_42_2-debuginfo-1-3.el7 | 3_10_0-1160_42_2-debuginfo-1-3.el7 |
redhat/kpatch-patch | <3_10_0-1160_45_1-1-2.el7 | 3_10_0-1160_45_1-1-2.el7 |
redhat/kpatch-patch | <3_10_0-1160_45_1-debuginfo-1-2.el7 | 3_10_0-1160_45_1-debuginfo-1-2.el7 |
redhat/kpatch-patch | <3_10_0-1160_49_1-1-1.el7 | 3_10_0-1160_49_1-1-1.el7 |
redhat/kpatch-patch | <3_10_0-1160_49_1-debuginfo-1-1.el7 | 3_10_0-1160_49_1-debuginfo-1-1.el7 |
redhat/kpatch-patch | <3_10_0-1160_53_1-1-1.el7 | 3_10_0-1160_53_1-1-1.el7 |
redhat/kpatch-patch | <3_10_0-1160_53_1-debuginfo-1-1.el7 | 3_10_0-1160_53_1-debuginfo-1-1.el7 |
redhat/kpatch-patch | <3_10_0-1160_21_1-1-9.el7 | 3_10_0-1160_21_1-1-9.el7 |
redhat/kpatch-patch | <3_10_0-1160_21_1-debuginfo-1-9.el7 | 3_10_0-1160_21_1-debuginfo-1-9.el7 |
redhat/kpatch-patch | <3_10_0-1160_24_1-1-7.el7 | 3_10_0-1160_24_1-1-7.el7 |
redhat/kpatch-patch | <3_10_0-1160_24_1-debuginfo-1-7.el7 | 3_10_0-1160_24_1-debuginfo-1-7.el7 |
redhat/kpatch-patch | <3_10_0-1160_25_1-1-7.el7 | 3_10_0-1160_25_1-1-7.el7 |
redhat/kpatch-patch | <3_10_0-1160_25_1-debuginfo-1-7.el7 | 3_10_0-1160_25_1-debuginfo-1-7.el7 |
redhat/kpatch-patch | <3_10_0-1160_31_1-1-6.el7 | 3_10_0-1160_31_1-1-6.el7 |
redhat/kpatch-patch | <3_10_0-1160_31_1-debuginfo-1-6.el7 | 3_10_0-1160_31_1-debuginfo-1-6.el7 |
redhat/kpatch-patch | <3_10_0-1160_36_2-1-5.el7 | 3_10_0-1160_36_2-1-5.el7 |
redhat/kpatch-patch | <3_10_0-1160_36_2-debuginfo-1-5.el7 | 3_10_0-1160_36_2-debuginfo-1-5.el7 |
redhat/kpatch-patch | <3_10_0-1160_41_1-1-4.el7 | 3_10_0-1160_41_1-1-4.el7 |
redhat/kpatch-patch | <3_10_0-1160_41_1-debuginfo-1-4.el7 | 3_10_0-1160_41_1-debuginfo-1-4.el7 |
redhat/kpatch-patch | <3_10_0-1160_42_2-1-3.el7 | 3_10_0-1160_42_2-1-3.el7 |
redhat/kpatch-patch | <3_10_0-1160_42_2-debuginfo-1-3.el7 | 3_10_0-1160_42_2-debuginfo-1-3.el7 |
redhat/kpatch-patch | <3_10_0-1160_45_1-1-2.el7 | 3_10_0-1160_45_1-1-2.el7 |
redhat/kpatch-patch | <3_10_0-1160_45_1-debuginfo-1-2.el7 | 3_10_0-1160_45_1-debuginfo-1-2.el7 |
redhat/kpatch-patch | <3_10_0-1160_49_1-1-1.el7 | 3_10_0-1160_49_1-1-1.el7 |
redhat/kpatch-patch | <3_10_0-1160_49_1-debuginfo-1-1.el7 | 3_10_0-1160_49_1-debuginfo-1-1.el7 |
redhat/kpatch-patch | <3_10_0-1160_53_1-1-1.el7 | 3_10_0-1160_53_1-1-1.el7 |
redhat/kpatch-patch | <3_10_0-1160_53_1-debuginfo-1-1.el7 | 3_10_0-1160_53_1-debuginfo-1-1.el7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2022:0592 is classified as important due to the potential for privilege escalation.
RHSA-2022:0592 addresses multiple vulnerabilities, including a use-after-free issue in eventpoll.c (CVE-2020-0466) that may lead to privilege escalation.
To fix RHSA-2022:0592, update the kpatch-patch package to the recommended versions ranging from 3_10_0-1160_21_1-1-9.el7 to 3_10_0-1160_53_1-1-1.el7.
RHSA-2022:0592 affects systems running the affected versions of the kpatch-patch package on Red Hat Enterprise Linux 7.
Yes, a reboot is recommended after applying the patches from RHSA-2022:0592 to ensure the kernel updates are fully enacted.