What is the vulnerability identified by RHSA-2022:7188?

The vulnerability RHSA-2022:7188 is an authorization bypass affecting the device-mapper-multipath daemon that listens for client connections on an abstract Unix socket.

What is the severity of RHSA-2022:7188?

The severity of RHSA-2022:7188 has been classified as important, highlighting its potential impact on system security.

How do I fix the vulnerability RHSA-2022:7188?

To fix the vulnerability RHSA-2022:7188, you should update the affected device-mapper-multipath packages to version 0.8.3-3.el8_2.7 or later.

Which packages are affected by RHSA-2022:7188?

Affected packages include device-mapper-multipath, device-mapper-multipath-debuginfo, device-mapper-multipath-libs, and several others.

How can I check if my system is vulnerable to RHSA-2022:7188?

You can check for vulnerability to RHSA-2022:7188 by verifying the installed version of the device-mapper-multipath packages against the remediation version.

Vulnerability/
RHSA-2022:7188

25/10/2022

7/3/2024

RHSA-2022:7188: Important: device-mapper-multipath security update

First published: Tue Oct 25 2022(Updated: )

The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.<br>Security Fix(es):<br><li> device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket (CVE-2022-41974)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software	Affected Version	How to fix
redhat/device-mapper-multipath	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-debugsource	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-debugsource	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-libs	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-libs	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-libs-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-libs-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/kpartx	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/kpartx-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/kpartx-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/libdmmp	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/libdmmp	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/libdmmp-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/libdmmp-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/kpartx	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-debugsource	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-libs	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-libs-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/kpartx	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/kpartx-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/libdmmp	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/libdmmp-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/device-mapper-multipath-debuginfo	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/device-mapper-multipath-debugsource	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/device-mapper-multipath-libs	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/device-mapper-multipath-libs-debuginfo	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/kpartx	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/kpartx-debuginfo	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/libdmmp	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/libdmmp-debuginfo	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/device-mapper-multipath-devel	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-devel	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-devel	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-devel	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa

Never miss a vulnerability like this again

Reference Links

https://access.redhat.com/errata/RHSA-2022:7188 (Advisory)

Frequently Asked Questions

What is the vulnerability identified by RHSA-2022:7188?
The vulnerability RHSA-2022:7188 is an authorization bypass affecting the device-mapper-multipath daemon that listens for client connections on an abstract Unix socket.
What is the severity of RHSA-2022:7188?
The severity of RHSA-2022:7188 has been classified as important, highlighting its potential impact on system security.
How do I fix the vulnerability RHSA-2022:7188?
To fix the vulnerability RHSA-2022:7188, you should update the affected device-mapper-multipath packages to version 0.8.3-3.el8_2.7 or later.
Which packages are affected by RHSA-2022:7188?
Affected packages include device-mapper-multipath, device-mapper-multipath-debuginfo, device-mapper-multipath-libs, and several others.
How can I check if my system is vulnerable to RHSA-2022:7188?
You can check for vulnerability to RHSA-2022:7188 by verifying the installed version of the device-mapper-multipath packages against the remediation version.

agent/type
agent/severity
agent/softwarecombine
agent/last-modified-date
agent/first-publish-date
agent/title
agent/description
collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2022:7188
agent/software-canonical-lookup
agent/references
agent/remedy
agent/tags
agent/event
agent/source
package-manager/redhat