RHSA-2022:0820: Important: kernel security, bug fix, and enhancement update

First published: Thu Mar 10 2022(Updated: )

The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>The following packages have been upgraded to a later upstream version: kernel (4.18.0). (BZ#2036933)<br>Security Fix(es):<br><li> kernel: improper initialization of the "flags" member of the new pipe_buffer (CVE-2022-0847)</li> <li> kernel: fget: check that the fd still exists after getting a ref to it (CVE-2021-4083)</li> <li> kernel: possible privileges escalation due to missing TLB flush (CVE-2022-0330)</li> <li> kernel: cgroups v1 release_agent feature may allow privilege escalation (CVE-2022-0492)</li> <li> kernel: failing usercopy allows for use-after-free exploitation (CVE-2022-22942)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> [Intel 8.3 Bug] ICX Whitley: PCIe - kernel panic with AER-INJECT (BZ#2040309)</li> <li> [ESXi][RHEL8] A task is stuck waiting for the completion of the vmci_resouce releasing upon the balloon reset. [None8.2.0.z] (BZ#2052200)</li>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/description
• agent/event
• agent/first-publish-date
• agent/last-modified-date
• agent/references
• agent/remedy
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/title
• agent/type
• agent/weakness
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2022:0820
• agent/software-canonical-lookup
• package-manager/redhat