RHSA-2022:8809: Important: kernel security and bug fix update

First published: Tue Dec 06 2022(Updated: )

The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> kernel: KVM: cmpxchg_gpte can write to pfns outside the userspace region (CVE-2022-1158)</li> <li> kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> x86/intel: processors require energy_perf_bias setting (BZ#2102103)</li> <li> System crashes due to list_add double add at iwl_mvm_mac_wake_tx_queue+0x71 (BZ#2112264)</li> <li> Fix SCHED_WARN_ON deadlock (BZ#2125422)</li> <li> Starting VMs on a KVM-host with EL8.6-kernel sometimes produces timejumps into the future for other already running guest-VMs [rhel.8] (BZ#2125671)</li> <li> RHEL8.4 - zfcp: fix missing auto port scan and thus missing target ports (BZ#2127850)</li> <li> vfio zero page mappings fail after 2M instances (BZ#2128516)</li> <li> The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (BZ#2129728)</li> <li> ice: Driver Update up to 5.19 (BZ#2130993)</li> <li> virtio-net: support XDP when not more queues (BZ#2131740)</li> <li> VMs hang after migration (BZ#2131756)</li> <li> Update NVME subsystem with bug fixes and minor changes (BZ#2132555)</li> <li> [HPE BUG] Premature swapping with swappiness=0 while there’s still plenty of pagecache to be reclaimed. (BZ#2133831)</li> <li> nf_conntrack causing nfs to stall (BZ#2134089)</li> <li> Fix issue that enables STABLE_WRITES by default and causes performance regressions (BZ#2135814)</li> <li> [ice] Intel E810 PTP clock glitching (BZ#2136037)</li> <li> ice: arp replies not making it to switch (BZ#2136043)</li> <li> [ice]configure link-down-on-close on and change interface mtu to 9000,the interface can't up (BZ#2136217)</li> <li> ice: dump additional CSRs for Tx hang debugging (BZ#2136514)</li> <li> crypto/testmgr.c should not list dh, ecdh as .fips_allowed = 1 (BZ#2136525)</li> <li> FIPS module identification via name and version (BZ#2136540)</li> <li> FIPS self-tests for RSA pkcs7 signature verification (BZ#2137316)</li> <li> After upgrading to ocp4.11.1, our dpdk application using vlan strip offload is not working (BZ#2138158)</li> <li> WARNING: CPU: 0 PID: 9637 at kernel/time/hrtimer.c:1309 hrtimer_start_range_ns+0x35d/0x400 (BZ#2138954)</li> <li> [DELL EMC 8.6-RT BUG] System is not booting into RT Kernel with perc12. (BZ#2139217)</li> <li> Cannot trigger kernel dump using NMI on SNO node running PAO and RT kernel (BZ#2139581)</li> <li> Laser bias information can't be shown by ethtool on rhel8.6 (BZ#2139638)</li> <li> Nested KVM is not working on RHEL 8.6 with hardware error 0x7 (BZ#2140144)</li>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/description
• agent/event
• agent/first-publish-date
• agent/last-modified-date
• agent/references
• agent/remedy
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/title
• agent/type
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2022:8809
• agent/software-canonical-lookup
• package-manager/redhat