RHSA-2022:1417: Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> kernel: use after free in eventpoll.c may lead to escalation of privilege (CVE-2020-0466)</li> <li> kernel: Use After Free in unixgc() which could result in a local privilege escalation (CVE-2021-0920)</li> <li> kernel: xfs: raw block device data leak in XFSIOCALLOCSP IOCTL (CVE-2021-4155)</li> <li> kernel: cgroups v1 releaseagent feature may allow privilege escalation (CVE-2022-0492)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:1417?
The severity of RHSA-2022:1417 is considered high due to the potential for privilege escalation.
How do I fix RHSA-2022:1417?
To fix RHSA-2022:1417, you should update to the kernel version 2.6.32-754.47.1.el6 or higher.
Which packages are affected by RHSA-2022:1417?
RHSA-2022:1417 affects multiple packages including kernel, kernel-debug, and kernel-devel among others.
What vulnerabilities are addressed in RHSA-2022:1417?
RHSA-2022:1417 addresses vulnerabilities including a use-after-free in eventpoll.c and unix_gc() that could lead to privilege escalation.
Is RHSA-2022:1417 applicable to all Linux distributions?
RHSA-2022:1417 is specific to Red Hat Enterprise Linux and may not apply to other Linux distributions.