RHSA-2022:5626: Important: kernel security and bug fix update

Published Jul 19, 2022
·
Updated

The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak (CVE-2022-1012) kernel: race condition in perfeventopen leads to privilege escalation (CVE-2022-1729) kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root (CVE-2022-32250) kernel: cgroup: Use open-time creds and namespace for migration perm checks (CVE-2021-4197) kernel: Race condition in races in skpeerpid and skpeercred accesses (CVE-2021-4203) kernel: the copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check (CVE-2020-29368) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): Failed to reboot after crash trigger (BZ#2060747) conntrack entries linger around after test (BZ#2066357) Enable nested virtualization (BZ#2079070) slub corruption during LPM of hnv interface (BZ#2081251) sleeping function called from invalid context at kernel/locking/spinlockrt.c:35 (BZ#2082091) Backport request of "genirq: use rcu in kstatirqsusr()" (BZ#2083309) ethtool -L may cause system to hang (BZ#2083323) For isolated CPUs (with nohzfull enabled for isolated CPUs) CPU utilization statistics are not getting reflected continuously (BZ#2084139) Affinity broken due to vector space exhaustion (BZ#2084647) kernel memory leak while freeing nested actions (BZ#2086597) sync rhel-8.6 with upstream 5.13 through 5.16 fixes and improvements (BZ#2088037) Kernel panic possibly when cleaning namespace on pod deletion (BZ#2089539) Softirq hrtimers are being placed on the per-CPU softirq clocks on isolcpu’s. (BZ#2090485) fix missed wake-ups in rqqosthrottle try two (BZ#2092076) NFS4 client experiencing IO outages while sending duplicate SYNs and erroneous RSTs during connection reestablishment (BZ#2094334) using thiscpuread() in preemptible [00000000] code: kworker/u66:1/937154 (BZ#2095775) Need some changes in RHEL8.x kernels. (BZ#2096932)

Affected Software

105 affected componentsFixes available
redhat/kernel<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/bpftool<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/bpftool-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-abi-stablelists<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-core<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-cross-headers<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug-core<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug-devel<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug-modules<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug-modules-extra<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-devel<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-doc<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-headers<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-modules<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-modules-extra<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-tools<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-tools-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-tools-libs<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/perf<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/perf-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/python3-perf<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/python3-perf-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/bpftool<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/bpftool-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-core<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-cross-headers<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug-core<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug-devel<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug-modules<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug-modules-extra<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debuginfo-common-s390x<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-devel<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-headers<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-modules<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-modules-extra<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-tools<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-tools-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-zfcpdump<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-zfcpdump-core<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-zfcpdump-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-zfcpdump-devel<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-zfcpdump-modules<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-zfcpdump-modules-extra<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/perf<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/perf-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/python3-perf<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/python3-perf-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/bpftool<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/bpftool-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-core<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-cross-headers<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug-core<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug-devel<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug-modules<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debug-modules-extra<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-debuginfo-common-ppc64le<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-devel<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-headers<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-modules<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-modules-extra<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-tools<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-tools-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-tools-libs<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/perf<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/perf-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/python3-perf<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/python3-perf-debuginfo<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/bpftool<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/bpftool-debuginfo<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-core<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-cross-headers<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-debug<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-debug-core<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-debug-debuginfo<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-debug-devel<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-debug-modules<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-debug-modules-extra<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-debuginfo<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-debuginfo-common-aarch64<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-devel<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-headers<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-modules<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-modules-extra<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-tools<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-tools-debuginfo<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-tools-libs<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/perf<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/perf-debuginfo<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/python3-perf<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/python3-perf-debuginfo<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa
redhat/kernel-tools-libs-devel<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-tools-libs-devel<4.18.0-305.57.1.el8_4
4.18.0-305.57.1.el8_4
redhat/kernel-tools-libs-devel<4.18.0-305.57.1.el8_4.aa
4.18.0-305.57.1.el8_4.aa

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  2. Upgrade

    Upgrade redhat/bpftool to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  3. Upgrade

    Upgrade redhat/bpftool-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  4. Upgrade

    Upgrade redhat/kernel-abi-stablelists to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  5. Upgrade

    Upgrade redhat/kernel-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  6. Upgrade

    Upgrade redhat/kernel-cross-headers to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  7. Upgrade

    Upgrade redhat/kernel-debug to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  8. Upgrade

    Upgrade redhat/kernel-debug-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  9. Upgrade

    Upgrade redhat/kernel-debug-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  10. Upgrade

    Upgrade redhat/kernel-debug-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  11. Upgrade

    Upgrade redhat/kernel-debug-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  12. Upgrade

    Upgrade redhat/kernel-debug-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  13. Upgrade

    Upgrade redhat/kernel-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  14. Upgrade

    Upgrade redhat/kernel-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  15. Upgrade

    Upgrade redhat/kernel-doc to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  16. Upgrade

    Upgrade redhat/kernel-headers to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  17. Upgrade

    Upgrade redhat/kernel-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  18. Upgrade

    Upgrade redhat/kernel-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  19. Upgrade

    Upgrade redhat/kernel-tools to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  20. Upgrade

    Upgrade redhat/kernel-tools-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  21. Upgrade

    Upgrade redhat/kernel-tools-libs to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  22. Upgrade

    Upgrade redhat/perf to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  23. Upgrade

    Upgrade redhat/perf-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  24. Upgrade

    Upgrade redhat/python3-perf to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  25. Upgrade

    Upgrade redhat/python3-perf-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  26. Upgrade

    Upgrade redhat/kernel-debuginfo-common-s390x to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  27. Upgrade

    Upgrade redhat/kernel-zfcpdump to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  28. Upgrade

    Upgrade redhat/kernel-zfcpdump-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  29. Upgrade

    Upgrade redhat/kernel-zfcpdump-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  30. Upgrade

    Upgrade redhat/kernel-zfcpdump-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  31. Upgrade

    Upgrade redhat/kernel-zfcpdump-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  32. Upgrade

    Upgrade redhat/kernel-zfcpdump-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  33. Upgrade

    Upgrade redhat/kernel-debuginfo-common-ppc64le to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  34. Upgrade

    Upgrade redhat/bpftool to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  35. Upgrade

    Upgrade redhat/bpftool-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  36. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  37. Upgrade

    Upgrade redhat/kernel-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  38. Upgrade

    Upgrade redhat/kernel-cross-headers to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  39. Upgrade

    Upgrade redhat/kernel-debug to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  40. Upgrade

    Upgrade redhat/kernel-debug-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  41. Upgrade

    Upgrade redhat/kernel-debug-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  42. Upgrade

    Upgrade redhat/kernel-debug-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  43. Upgrade

    Upgrade redhat/kernel-debug-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  44. Upgrade

    Upgrade redhat/kernel-debug-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  45. Upgrade

    Upgrade redhat/kernel-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  46. Upgrade

    Upgrade redhat/kernel-debuginfo-common-aarch64 to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  47. Upgrade

    Upgrade redhat/kernel-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  48. Upgrade

    Upgrade redhat/kernel-headers to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  49. Upgrade

    Upgrade redhat/kernel-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  50. Upgrade

    Upgrade redhat/kernel-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  51. Upgrade

    Upgrade redhat/kernel-tools to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  52. Upgrade

    Upgrade redhat/kernel-tools-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  53. Upgrade

    Upgrade redhat/kernel-tools-libs to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  54. Upgrade

    Upgrade redhat/perf to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  55. Upgrade

    Upgrade redhat/perf-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  56. Upgrade

    Upgrade redhat/python3-perf to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  57. Upgrade

    Upgrade redhat/python3-perf-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  58. Upgrade

    Upgrade redhat/kernel-tools-libs-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4
  59. Upgrade

    Upgrade redhat/kernel-tools-libs-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-305.57.1.el8_4.aa
  60. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2090485
  61. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2096932
  62. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2084647
  63. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2083309
  64. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2079070
  65. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2084139
  66. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2089539
  67. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2094334
  68. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2066357
  69. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2083323
  70. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2092076
  71. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2086597
  72. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch CVE-2021-4203
  73. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch CVE-2022-32250
  74. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch CVE-2021-4197
  75. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch CVE-2022-1729
  76. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch CVE-2020-29368
  77. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2082091
  78. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2081251
  79. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2088037
  80. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch BZ#2095775
  81. Operational

    Reboot the system after applying this kernel security and bug fix update so the update takes effect.

Event History

Mar 24, 2026
Advisory Published
via Red Hat·09:54 AM
Data Sourced
via Red Hat·09:54 AM
RemedyDescriptionAffected Software

Frequently Asked Questions

1

What is the severity of RHSA-2022:5626?

The severity of RHSA-2022:5626 is classified as important.

2

How do I fix RHSA-2022:5626?

To fix RHSA-2022:5626, update the affected packages to version 4.18.0-305.57.1.el8_4 or later.

3

What vulnerability does RHSA-2022:5626 address?

RHSA-2022:5626 addresses a vulnerability related to a small table perturb size in the TCP source port generation algorithm (CVE-2022-1012).

4

Which packages are affected by RHSA-2022:5626?

Affected packages include kernel, bpftool, and various kernel-related libraries and modules in versions prior to 4.18.0-305.57.1.el8_4.

5

Is a reboot required after applying the fix for RHSA-2022:5626?

Yes, a reboot may be required after applying the fix for RHSA-2022:5626 to ensure all kernel updates are in effect.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203