Описание
ELSA-2022-9496: kernel security update (IMPORTANT)
[4.18.0-372.9.1.0.2.el8.OL8]
- debug: lockdown kgdb [Orabug: 34270802] {CVE-2022-21499}
[4.18.0-372.9.1.0.1.el8.OL8]
- mei: me: disable driver on the ign firmware (Alexander Usyskin) [Orabug: 34176425]
Обновленные пакеты
Oracle Linux 8
Oracle Linux x86_64
bpftool
4.18.0-372.9.1.0.2.el8
kernel
4.18.0-372.9.1.0.2.el8
kernel-abi-stablelists
4.18.0-372.9.1.0.2.el8
kernel-core
4.18.0-372.9.1.0.2.el8
kernel-cross-headers
4.18.0-372.9.1.0.2.el8
kernel-debug
4.18.0-372.9.1.0.2.el8
kernel-debug-core
4.18.0-372.9.1.0.2.el8
kernel-debug-devel
4.18.0-372.9.1.0.2.el8
kernel-debug-modules
4.18.0-372.9.1.0.2.el8
kernel-debug-modules-extra
4.18.0-372.9.1.0.2.el8
kernel-devel
4.18.0-372.9.1.0.2.el8
kernel-doc
4.18.0-372.9.1.0.2.el8
kernel-headers
4.18.0-372.9.1.0.2.el8
kernel-modules
4.18.0-372.9.1.0.2.el8
kernel-modules-extra
4.18.0-372.9.1.0.2.el8
kernel-tools
4.18.0-372.9.1.0.2.el8
kernel-tools-libs
4.18.0-372.9.1.0.2.el8
kernel-tools-libs-devel
4.18.0-372.9.1.0.2.el8
perf
4.18.0-372.9.1.0.2.el8
python3-perf
4.18.0-372.9.1.0.2.el8
Связанные CVE
Связанные уязвимости
KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
KGDB and KDB allow read and write access to kernel memory, and thus sh ...
KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H).