RHSA-2023:0854: Important: kernel-rt security and bug fix update

First published: Tue Feb 21 2023(Updated: )

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.<br>Security Fix(es):<br><li> kernel: mm/mremap.c use-after-free vulnerability (CVE-2022-41222)</li> <li> kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)</li> <li> kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> RHEL8-RT: Backport use of a dedicate thread for timer wakeups (BZ#2127204)</li> <li> SNO Crashed twice - kernel BUG at lib/list_debug.c:28 (BZ#2132062)</li> <li> Cannot trigger kernel dump using NMI on SNO node running PAO and RT kernel [RT-8] (BZ#2139851)</li> <li> scheduling while atomic in fpu_clone() -&gt; fpu_inherit_perms() (BZ#2154469)</li> <li> The latest RHEL 8.7.z2 kernel changes need to be merged into the RT source tree to keep source parity between the two kernels. (BZ#2159806)</li>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/description
• agent/event
• agent/first-publish-date
• agent/last-modified-date
• agent/references
• agent/remedy
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/title
• agent/type
• agent/weakness
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2023:0854
• agent/software-canonical-lookup
• package-manager/redhat