Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2022:1209
HistoryApr 05, 2022 - 2:07 p.m.

(RHSA-2022:1209) Important: kernel-rt security and bug fix update

2022-04-0514:07:14
access.redhat.com
38
kernel-rt
security
bug fix
high determinism
tipc
cve-2022-0435
cve-2020-8647
cve-2020-8649
rhel-8.2.z16 batch

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.009

Percentile

83.4%

JSON

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS (CVE-2022-0435)

  • kernel: out-of-bounds read in in vc_do_resize function in drivers/tty/vt/vt.c (CVE-2020-8647)

  • kernel: invalid read location in vgacon_invert_region function in drivers/video/console/vgacon.c (CVE-2020-8649)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • kernel-rt: update RT source tree to the latest RHEL-8.2.z16 Batch (BZ#2066950)
OSVersionArchitecturePackageVersionFilename
RedHat8x86_64kernel-rt< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-devel< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-devel-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-modules< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-modules-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-debug-devel< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-debug-devel-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-debug-core< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-debug-core-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-debug< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-debug-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-debuginfo< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-debuginfo-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-debug-modules< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-debug-modules-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-modules-extra< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-modules-extra-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-core< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-core-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
Rows per page:
1-10 of 151

Related

redhat 12
nessus 64
ubuntu 4
f5 1
ubuntucve 5
openvas 32
suse 3
cvelist 4
redhatcve 4
prion 3
veracode 3
debiancve 4
cve 4
nvd 4
cbl_mariner 4
photon 9
cnvd 1
githubexploit 1
mageia 4
oraclelinux 6
fedora 2
osv 9
vulnrichment 1
rocky 4
cloudlinux 1
cloudfoundry 1
almalinux 1
ibm 2
slackware 2
debian 4
redhat
redhat
(RHSA-2022:1213) Important: kernel security update
2022-04-05 14:11:11
(RHSA-2022:1619) Important: kpatch-patch security update
2022-04-27 07:22:43
(RHSA-2022:1186) Important: kpatch-patch security update
2022-04-05 08:02:16
nessus
nessus
RHEL 8 : kernel (RHSA-2022:1213)
2022-04-06 00:00:00
RHEL 8 : kernel-rt (RHSA-2022:1209)
2022-04-06 00:00:00
openSUSE Security Update : the Linux Kernel (openSUSE-2020-388)
2020-03-30 00:00:00
ubuntu
ubuntu
Kernel Live Patch Security Notice
2020-05-01 00:00:00
Kernel Live Patch Security Notice
2020-06-09 00:00:00
Linux kernel vulnerabilities
2022-03-22 00:00:00
f5
f5
K03310902 : Multiple Linux vulnerabilities CVE-2020-8647,CVE-2020-8648, CVE-2020-8649
2020-03-26 00:00:00
ubuntucve
ubuntucve
CVE-2020-27418
2023-08-22 00:00:00
CVE-2020-8649
2020-02-06 00:00:00
CVE-2020-8647
2020-02-06 00:00:00
openvas
openvas
openSUSE: Security Advisory for the (openSUSE-SU-2020:0388-1)
2020-03-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0836-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2020-0140)
2022-01-28 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2020-03-27 00:00:00
Security update for the Linux Kernel (critical)
2022-02-11 00:00:00
Security update for the Linux Kernel (critical)
2022-02-10 00:00:00
cvelist
cvelist
CVE-2020-8647
2020-02-06 00:06:51
CVE-2020-8649
2020-02-06 00:06:25
CVE-2022-0435
2022-03-25 00:00:00
redhatcve
redhatcve
CVE-2020-8647
2020-02-13 12:15:16
CVE-2020-8649
2020-02-13 12:15:08
CVE-2022-0435
2022-02-10 15:52:24
prion
prion
Design/Logic Flaw
2020-02-06 01:15:00
Design/Logic Flaw
2020-02-06 01:15:00
Stack overflow
2022-03-25 19:15:00
veracode
veracode
Out Of Bound Reads (OOB)
2020-11-05 03:09:53
Denial Of Service (DoS)
2020-11-05 03:09:54
Denial Of Service (DoS)
2022-03-26 18:15:22
debiancve
debiancve
CVE-2020-8647
2020-02-06 01:15:10
CVE-2020-8649
2020-02-06 01:15:10
CVE-2022-0435
2022-03-25 19:15:10
cve
cve
CVE-2020-8647
2020-02-06 01:15:10
CVE-2020-8649
2020-02-06 01:15:10
CVE-2022-0435
2022-03-25 19:15:10
nvd
nvd
CVE-2020-8647
2020-02-06 01:15:10
CVE-2020-8649
2020-02-06 01:15:10
CVE-2022-0435
2022-03-25 19:15:10
cbl_mariner
cbl_mariner
CVE-2020-8647 affecting package kernel 5.4.91-6
2021-04-06 23:51:14
CVE-2020-8649 affecting package kernel 5.4.91-6
2021-04-06 23:51:14
CVE-2022-0435 affecting package kernel 5.10.109.1-2
2022-05-12 02:17:02
photon
photon
Important Photon OS Security Update - PHSA-2020-0221
2020-03-17 00:00:00
Critical Photon OS Security Update - PHSA-2022-0152
2022-02-11 00:00:00
Critical Photon OS Security Update - PHSA-2022-4.0-0152
2022-02-11 00:00:00
cnvd
cnvd
Linux kernel buffer overflow vulnerability (CNVD-2022-68616)
2022-02-14 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Linux Linux Kernel
2023-04-20 17:29:02
mageia
mageia
Updated kernel packages fix security vulnerabilities
2020-03-14 02:19:55
Updated kernel-linus packages fix security vulnerabilities
2020-04-04 01:53:32
Updated kernel packages fix security vulnerabilities
2022-02-15 23:50:31
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2020-05-18 00:00:00
Unbreakable Enterprise kernel security update
2020-05-11 00:00:00
Unbreakable Enterprise kernel security update
2020-05-06 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: kernel-5.16.9-100.fc34
2022-02-17 03:07:22
[SECURITY] Fedora 35 Update: kernel-5.16.9-200.fc35
2022-02-17 03:16:11
osv
osv
CVE-2022-48711
2024-06-20 11:15:54
UBUNTU-CVE-2022-48711
2024-06-20 11:15:00
linux-oem-5.14 vulnerabilities
2022-02-22 22:45:56
vulnrichment
vulnrichment
CVE-2022-48711 tipc: improve size validations for received domain records
2024-06-20 11:13:06
rocky
rocky
kernel security, bug fix, and enhancement update
2022-03-11 02:26:54
kernel-rt security and bug fix update
2022-03-11 02:24:05
kernel-rt security and bug fix update
2022-03-10 14:37:54
cloudlinux
cloudlinux
Fix of 13 CVEs
2022-04-21 21:21:15
cloudfoundry
cloudfoundry
USN-5339-1: Linux kernel vulnerabilities | Cloud Foundry
2022-05-23 00:00:00
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2022-03-10 14:43:03
ibm
ibm
Security Bulletin: Vulnerabilities in Linux Kernel and Java affect IBM Spectrum Protect Plus
2021-03-03 21:46:54
Security Bulletin: IBM Security Guardium is affected by kernel vulnerabilities
2021-04-13 16:24:15
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2022-03-09 04:16:04
[slackware-security] Slackware 14.2 kernel
2020-03-26 23:13:28
debian
debian
[SECURITY] [DSA 5092-1] linux security update
2022-03-07 12:54:12
[SECURITY] [DLA 2242-1] linux-4.9 security update
2020-06-10 10:48:38
[SECURITY] [DSA 4698-1] linux security update
2020-06-09 19:44:16

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.009

Percentile

83.4%

JSON
Related for RHSA-2022:1209
redhat12nessus64ubuntu4f51ubuntucve5openvas32suse3cvelist4redhatcve4prion3veracode3debiancve4cve4nvd4cbl_mariner4photon9cnvd1githubexploit1mageia4oraclelinux6fedora2osv9vulnrichment1rocky4cloudlinux1cloudfoundry1almalinux1ibm2slackware2debian4