Описание
Important: kernel security and bug fix update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: use-after-free in RDMA listen() (CVE-2021-4028)
-
kernel: heap out of bounds write in nf_dup_netdev.c (CVE-2022-25636)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
-
Backport DFS fixes from upstream (BZ#2056329)
-
[Rocky Linux8.5] lpfc driver often fails to detect storage directly connected to Broadcom FC HBA (BZ#2058193)
-
nf_reinject calls nf_queue_entry_free on an already freed entry->state (BZ#2061446)
-
gfs2 blocking in gdlm_lock (BZ#2069750)
Затронутые продукты
Rocky Linux 8
Связанные CVE
Исправления
- Red Hat - 2027201
- Red Hat - 2056830
Связанные уязвимости
ELSA-2022-1550: kernel security and bug fix update (IMPORTANT)
A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this use-after-free to crash the system or possibly escalate privileges on the system.
A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this use-after-free to crash the system or possibly escalate privileges on the system.
A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this use-after-free to crash the system or possibly escalate privileges on the system.
A flaw in the Linux kernel's implementation of RDMA communications man ...