RHSA-2022:7187: Important: device-mapper-multipath security update
The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.Security Fix(es): device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket (CVE-2022-41974) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:7187?
The severity of RHSA-2022:7187 is classified as important.
How do I fix RHSA-2022:7187?
You can fix RHSA-2022:7187 by upgrading the affected device-mapper-multipath packages to version 0.8.0-5.el8_1.1 or later.
What software is affected by RHSA-2022:7187?
RHSA-2022:7187 affects device-mapper-multipath packages and related libraries and tools in Red Hat Enterprise Linux 8.
What is the nature of the vulnerability in RHSA-2022:7187?
The nature of the vulnerability in RHSA-2022:7187 is an authorization bypass that allows unauthorized clients to connect to the multipathd daemon.
What steps should I take to mitigate RHSA-2022:7187 while waiting for a fix?
To mitigate RHSA-2022:7187, consider restricting access to the multipathd daemon until the update is applied.