RHSA-2022:7110: Important: kernel security, bug fix, and enhancement update

First published: Tue Oct 25 2022(Updated: )

The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> A use-after-free in cls_route filter implementation may lead to privilege escalation (CVE-2022-2588)</li> <li> Information leak in scsi_ioctl() (CVE-2022-0494)</li> <li> A kernel-info-leak issue in pfkey_register (CVE-2022-1353)</li> <li> RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816, CVE-2022-29900)</li> <li> Branch Type Confusion (non-retbleed) (CVE-2022-23825)</li> <li> RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> Add s390_iommu_aperture kernel parameter (BZ#2081324)</li> <li> Blackscreen and hangup after resume from hibernate or S3 with DFGX WX3200 (BZ#2091065)</li> <li> Update NVME subsystem with bug fixes and minor changes (BZ#2106017)</li> <li> Fix parsing of nw_proto for IPv6 fragments (BZ#2106703)</li> <li> "vmcore failed, _exitcode:139" error observed while capturing vmcore during fadump after memory remove. incomplete vmcore is captured. (BZ#2107488)</li> <li> 'disable_policy' is ignored for addresses configured on a down interface (BZ#2109971)</li> <li> Backport request for new cpufreq.default_governor kernel command line parameter (BZ#2109996)</li> <li> Panics in mpt3sas mpt3sas_halt_firmware() if mpt3sas_fwfault_debug=1 enabled when poweroff issued to server (BZ#2111140)</li> <li> IOMMU/DMA update for 8.7 (BZ#2111692)</li> <li> Update Broadcom Emulex lpfc driver for RHEL8.7 with bug fixes (14.0.0.13) (BZ#2112103)</li> <li> Incorrect Socket(s) &amp; "Core(s) per socket" reported by lscpu command. (BZ#2112820)</li> <li> Panic in ch_release() due to NULL ch-&gt;device pointer, backport upstream fix (BZ#2115965)</li> <li> pyverbs-tests fail over qede IW HCAs on "test_query_rc_qp" (tests.test_qp.QPTest) (BZ#2119122)</li> <li> qedi shutdown handler hangs upon reboot (BZ#2119847)</li> <li> cache link_info for ethtool (BZ#2120197)</li> <li> Important iavf bug fixes (BZ#2120225)</li> <li> Hibernate crash with Aquantia 2.5/5 Gb LAN card (BZ#2124966)</li> <li> While using PTimekeeper the qede driver produces excessive log messages (BZ#2125477)</li> <li> general protection fault handling rpc_xprt.timer (BZ#2126184)</li> <li> Not enough device MSI-X vectors (BZ#2126482)</li> <li> Atlantic driver panic on wakeup after hybernate (BZ#2127845)</li> <li> Memory leak in vxlan_xmit_one (BZ#2131255)</li> <li> Missing hybernate/resume fixes (BZ#2131936)</li> Enhancement(s):<br><li> Update smartpqi driver to latest upstream Second Set of Patches (BZ#2112354)</li> <li> qed/qede/qedr - driver updates to latest upstream (BZ#2120611)</li> <li> Update qedi driver to latest upstream (BZ#2120612)</li> <li> Update qedf driver to latest upstream (BZ#2120613)</li> <li> Include the support for new NVIDIA Mobile GFX GA103 on ADL Gen Laptops (BZ#2127122)</li> <li> Need to enable hpilo to support new HPE RL300 Gen11 for ARM (aarch64) (BZ#2129923)</li>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/severity
• agent/references
• agent/type
• agent/softwarecombine
• agent/first-publish-date
• agent/last-modified-date
• agent/remedy
• agent/weakness
• agent/title
• agent/description
• agent/tags
• agent/event
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2022:7110
• agent/software-canonical-lookup
• package-manager/redhat