RHSA-2022:7279: Important: kernel security and bug fix update
The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> kernel: a use-after-free in clsroute filter implementation may lead to privilege escalation (CVE-2022-2588)</li> <li> hw: cpu: Incomplete cleanup of multi-core shared buffers (aka SBDR) (CVE-2022-21123)</li> <li> hw: cpu: Incomplete cleanup of microarchitectural fill buffers (aka SBDS) (CVE-2022-21125)</li> <li> hw: cpu: Incomplete cleanup in specific special register write operations (aka DRPW) (CVE-2022-21166)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> RHEL8.6[64TB/240c Denali]:" vmcore failed, exitcode:139" error observed while capturing vmcore during fadump after memory remove. incomplete vmcore is captured. (BZ#2107491)</li>
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:7279?
RHSA-2022:7279 is classified as a security vulnerability that could lead to privilege escalation.
How do I fix RHSA-2022:7279?
To fix RHSA-2022:7279, update the kernel packages to version 4.18.0-193.93.1.el8_2 or later.
What components are affected by RHSA-2022:7279?
RHSA-2022:7279 affects several packages, including kernel, bpftool, and their associated debuginfo packages.
What types of systems are affected by RHSA-2022:7279?
RHSA-2022:7279 impacts systems that are running vulnerable versions of the Linux kernel as specified in the advisory.
Is there any specific exploitation method for RHSA-2022:7279?
The vulnerability associated with RHSA-2022:7279 involves a use-after-free condition, making it possible for attackers to escalate privileges.