ELSA-2022-4642

Опубликовано: 19 мая 2022

Источник: oracle-oval

Платформа: Oracle Linux 7

Описание

ELSA-2022-4642: kernel security and bug fix update (IMPORTANT)

[3.10.0-1160.66.1.OL7]

Update Oracle Linux certificates (Ilya Okomin)
Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
Update x509.genkey [Orabug: 24817676]
Conflict with shim-ia32 and shim-x64 <= 15-2.0.9
Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)

[3.10.0-1160.66.1]

net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
CI: Drop baseline runs (Veronika Kabatova)
perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]

[3.10.0-1160.65.1]

CI: Remove deprecated option (Veronika Kabatova)
RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]

[3.10.0-1160.64.1]

cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}

[3.10.0-1160.63.1]

NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]

Обновленные пакеты

Oracle Linux 7

Oracle Linux x86_64

bpftool

3.10.0-1160.66.1.el7

kernel

3.10.0-1160.66.1.el7

kernel-abi-whitelists

3.10.0-1160.66.1.el7

kernel-debug

3.10.0-1160.66.1.el7

kernel-debug-devel

3.10.0-1160.66.1.el7

kernel-devel

3.10.0-1160.66.1.el7

kernel-doc

3.10.0-1160.66.1.el7

kernel-headers

3.10.0-1160.66.1.el7

kernel-tools

3.10.0-1160.66.1.el7

kernel-tools-libs

3.10.0-1160.66.1.el7

kernel-tools-libs-devel

3.10.0-1160.66.1.el7

perf

3.10.0-1160.66.1.el7

python-perf

3.10.0-1160.66.1.el7

Связанные CVE

CVE-2022-0492

Ссылки на источники

Связанные уязвимости

CVE-2022-0492

CVSS3: 7.8

ubuntu

больше 3 лет назад

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.