RHSA-2022:0777: Important: kernel security, bug fix, and enhancement update

First published: Tue Mar 08 2022(Updated: )

The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> kernel: Use After Free in unix_gc() which could result in a local privilege escalation (CVE-2021-0920)</li> <li> kernel: use-after-free in RDMA listen() (CVE-2021-4028)</li> <li> kernel: possible privileges escalation due to missing TLB flush (CVE-2022-0330)</li> <li> kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS (CVE-2022-0435)</li> <li> kernel: missing check in ioctl allows kernel memory read/write (CVE-2022-0516)</li> <li> kernel: failing usercopy allows for use-after-free exploitation (CVE-2022-22942)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> Intel QAT Kernel power up fix (BZ#2016436)</li> <li> RHEL8: DFS provided SMB shares are not accessible following unprivileged access (BZ#2017176)</li> <li> xfs: I_DONTCACHE flag is ignored [xfstests: xfs/177] (BZ#2028533)</li> <li> spec: Support separate tools build (BZ#2031052)</li> <li> block: update to upstream v5.14 (BZ#2034395)</li> <li> Double free of kmalloc-64 cache struct ib_port-&gt;pkey_group from module ib_core . (BZ#2038723)</li> <li> RHEL8 - kvm: floating interrupts may get stuck (BZ#2040768)</li> <li> Data corruption on small files served by httpd, which is backed by cifs-mount (BZ#2041528)</li> <li> Add a net/mlx5 patch for Hardware Offload Fix (BZ#2042662)</li> <li> DNS lookup failures when run two times in a row (BZ#2043547)</li> <li> net/sched: Fix ct zone matching for invalid conntrack state (BZ#2043549)</li> <li> Windows guest random Bsod when 'hv-tlbflush' enlightenment is enabled (BZ#2048342)</li> <li> OCP node XFS metadata corruption after numerous reboots (BZ#2049291)</li> <li> ice: bug fix series for 8.6 (BZ#2051950)</li> <li> SNO 4.9: NO-CARRIER on pod interface using VF on intel E810-C NIC; IAVF_ERR_ADMIN_QUEUE_ERROR (BZ#2052984)</li> <li> ceph omnibus backport for RHEL-8.6.0 (BZ#2053724)</li> <li> SCTP peel-off with SELinux and containers in OCP (BZ#2054111)</li> <li> Selinux is not allowing SCTP connection setup between inter pod communication in enforcing mode (BZ#2054116)</li> Enhancement(s):<br><li> [Mellanox 8.5 FEAT] mlx5: drivers update upto Linux v5.12 [8.4.0.z] (BZ#2037730)</li> <li> [MCHP 8.5 FEAT] Update smartpqi driver to latest upstream [None8.4.0.z] (BZ#2042498)</li>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/weakness
• agent/severity
• agent/type
• agent/first-publish-date
• agent/softwarecombine
• agent/last-modified-date
• agent/remedy
• agent/title
• agent/references
• agent/tags
• agent/description
• agent/event
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2022:0777
• agent/software-canonical-lookup
• package-manager/redhat