First published: Thu Mar 10 2022(Updated: )
The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> kernel: improper initialization of the "flags" member of the new pipe_buffer (CVE-2022-0847)</li> <li> kernel: Use After Free in unix_gc() which could result in a local privilege escalation (CVE-2021-0920)</li> <li> kernel: use-after-free in RDMA listen() (CVE-2021-4028)</li> <li> kernel: fget: check that the fd still exists after getting a ref to it (CVE-2021-4083)</li> <li> kernel: possible privileges escalation due to missing TLB flush (CVE-2022-0330)</li> <li> kernel: cgroups v1 release_agent feature may allow privilege escalation (CVE-2022-0492)</li> <li> kernel: failing usercopy allows for use-after-free exploitation (CVE-2022-22942)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/kernel | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/bpftool | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/bpftool-debuginfo | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-abi-whitelists | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-core | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-cross-headers | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-debug | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-debug-core | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-debug-debuginfo | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-debug-devel | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-debug-modules | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-debug-modules-extra | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-debuginfo | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-debuginfo-common-ppc64le | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-devel | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-doc | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-headers | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-modules | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-modules-extra | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-tools | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-tools-debuginfo | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-tools-libs | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/perf | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/perf-debuginfo | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/python3-perf | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/python3-perf-debuginfo | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/bpftool | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/bpftool-debuginfo | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-core | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-cross-headers | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-debug | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-debug-core | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-debug-debuginfo | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-debug-devel | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-debug-modules | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-debug-modules-extra | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-debuginfo | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-devel | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-headers | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-modules | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-modules-extra | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-tools | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-tools-debuginfo | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/kernel-tools-libs | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/perf | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/perf-debuginfo | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/python3-perf | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
redhat/python3-perf-debuginfo | <4.18.0-147.64.1.el8_1 | 4.18.0-147.64.1.el8_1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2022:0823 is considered moderate due to improper initialization and potential use-after-free vulnerabilities.
To fix RHSA-2022:0823, update your kernel packages to version 4.18.0-147.64.1.el8_1 or later.
RHSA-2022:0823 addresses a vulnerability related to improper initialization and a use-after-free issue in the Linux kernel.
Systems running the affected kernel versions up to 4.18.0-147.64.1.el8_1 are impacted by RHSA-2022:0823.
There are no specific workarounds recommended for RHSA-2022:0823; applying the update is the best course of action.