RHSA-2023:1659: Important: kpatch-patch security update
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.Security Fix(es): kernel: stack overflow in doprocdointvec and procskipspaces (CVE-2022-4378) ALSA: pcm: Move rwsem lock inside sndctlelemread to prevent UAF (CVE-2023-0266) kernel: FUSE filesystem low-privileged user privileges escalation (CVE-2023-0386) kpatch: mm/mremap.c: incomplete fix for CVE-2022-41222 (CVE-2023-1476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:1659?
The severity of RHSA-2023:1659 is high due to the potential for a stack overflow vulnerability in the kernel.
How do I fix RHSA-2023:1659?
To fix RHSA-2023:1659, update your system to install the latest version of the kpatch-patch package recommended in the advisory.
Which versions of kpatch-patch are affected by RHSA-2023:1659?
Affected versions of kpatch-patch include 4_18_0-425_10_1-1-4.el8_7, 4_18_0-425_13_1-1-2.el8_7, and 4_18_0-425_3_1-1-6.el8.
What is CVE-2022-4378 related to RHSA-2023:1659?
CVE-2022-4378 is a security vulnerability that potentially allows an attacker to exploit a stack overflow in the kernel.
Can I still use my system while applying RHSA-2023:1659 updates?
Yes, you can usually apply the updates without needing to reboot immediately, but a reboot is recommended to ensure the changes take effect.