RHSA-2022:0819

Description

Red Hat Security Advisory: kernel-rt security and bug fix update

CVSS Metrics

• v3.1•HIGH•Score: 8.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected Systems

• redhat•kernel-rt

  < 0:4.18.0-348.20.1.rt7.150.el8_5 | < 0:4.18.0-348.20.1.rt7.150.el8_5

• redhat•kernel-rt-core

  < 0:4.18.0-348.20.1.rt7.150.el8_5 | < 0:4.18.0-348.20.1.rt7.150.el8_5

• redhat•kernel-rt-debug

  < 0:4.18.0-348.20.1.rt7.150.el8_5 | < 0:4.18.0-348.20.1.rt7.150.el8_5

• redhat•kernel-rt-debug-core

  < 0:4.18.0-348.20.1.rt7.150.el8_5 | < 0:4.18.0-348.20.1.rt7.150.el8_5

• redhat•kernel-rt-debug-debuginfo

  < 0:4.18.0-348.20.1.rt7.150.el8_5 | < 0:4.18.0-348.20.1.rt7.150.el8_5

• redhat•kernel-rt-debug-devel

  < 0:4.18.0-348.20.1.rt7.150.el8_5 | < 0:4.18.0-348.20.1.rt7.150.el8_5

• redhat•kernel-rt-debug-kvm

  < 0:4.18.0-348.20.1.rt7.150.el8_5 | < 0:4.18.0-348.20.1.rt7.150.el8_5

• redhat•kernel-rt-debug-modules

  < 0:4.18.0-348.20.1.rt7.150.el8_5 | < 0:4.18.0-348.20.1.rt7.150.el8_5

• redhat•kernel-rt-debug-modules-extra

  < 0:4.18.0-348.20.1.rt7.150.el8_5 | < 0:4.18.0-348.20.1.rt7.150.el8_5

• redhat•kernel-rt-debuginfo

  < 0:4.18.0-348.20.1.rt7.150.el8_5 | < 0:4.18.0-348.20.1.rt7.150.el8_5

• redhat•kernel-rt-debuginfo-common-x86_64

  < 0:4.18.0-348.20.1.rt7.150.el8_5 | < 0:4.18.0-348.20.1.rt7.150.el8_5

• redhat•kernel-rt-devel

  < 0:4.18.0-348.20.1.rt7.150.el8_5 | < 0:4.18.0-348.20.1.rt7.150.el8_5

• redhat•kernel-rt-kvm

  < 0:4.18.0-348.20.1.rt7.150.el8_5 | < 0:4.18.0-348.20.1.rt7.150.el8_5

• redhat•kernel-rt-modules

  < 0:4.18.0-348.20.1.rt7.150.el8_5 | < 0:4.18.0-348.20.1.rt7.150.el8_5

• redhat•kernel-rt-modules-extra

  < 0:4.18.0-348.20.1.rt7.150.el8_5 | < 0:4.18.0-348.20.1.rt7.150.el8_5

References (40)

• https://access.redhat.com/errata/RHSA-2022:0819
• https://access.redhat.com/security/updates/classification/#important
• https://access.redhat.com/security/vulnerabilities/RHSB-2022-002
• https://bugzilla.redhat.com/show_bug.cgi?id=2031930
• https://bugzilla.redhat.com/show_bug.cgi?id=2034514
• https://bugzilla.redhat.com/show_bug.cgi?id=2042404
• https://bugzilla.redhat.com/show_bug.cgi?id=2044809
• https://bugzilla.redhat.com/show_bug.cgi?id=2048738
• https://bugzilla.redhat.com/show_bug.cgi?id=2051505
• https://bugzilla.redhat.com/show_bug.cgi?id=2060795
• https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0819.json
• https://access.redhat.com/security/cve/CVE-2021-0920
• https://www.cve.org/CVERecord?id=CVE-2021-0920
• https://nvd.nist.gov/vuln/detail/CVE-2021-0920
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cbcf01128d0a92e131bd09f1688fe032480b65ca
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://access.redhat.com/security/cve/CVE-2021-4154
• https://www.cve.org/CVERecord?id=CVE-2021-4154
• https://nvd.nist.gov/vuln/detail/CVE-2021-4154
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b0462726e7ef281c35a7a4ae33e93ee2bc9975b
• https://access.redhat.com/security/cve/CVE-2022-0330
• https://www.cve.org/CVERecord?id=CVE-2022-0330
• https://nvd.nist.gov/vuln/detail/CVE-2022-0330
• https://www.openwall.com/lists/oss-security/2022/01/25/12
• https://access.redhat.com/security/cve/CVE-2022-0435
• https://www.cve.org/CVERecord?id=CVE-2022-0435
• https://nvd.nist.gov/vuln/detail/CVE-2022-0435
• https://www.openwall.com/lists/oss-security/2022/02/10/1
• https://access.redhat.com/security/cve/CVE-2022-0492
• https://www.cve.org/CVERecord?id=CVE-2022-0492
• https://nvd.nist.gov/vuln/detail/CVE-2022-0492
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af
• https://access.redhat.com/security/cve/CVE-2022-0847
• https://www.cve.org/CVERecord?id=CVE-2022-0847
• https://nvd.nist.gov/vuln/detail/CVE-2022-0847
• https://dirtypipe.cm4all.com/
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/lib/iov_iter.c?id=9d2231c5d74e13b2a0546fee6737ee4446017903
• https://access.redhat.com/security/cve/CVE-2022-22942
• https://www.cve.org/CVERecord?id=CVE-2022-22942
• https://nvd.nist.gov/vuln/detail/CVE-2022-22942