Lucene search

K
redhatRedHatRHSA-2022:7279
HistoryNov 01, 2022 - 2:04 p.m.

(RHSA-2022:7279) Important: kernel security and bug fix update

2022-11-0114:04:32
access.redhat.com
65
kernel security fix
use-after-free
incomplete cleanup
cve-2022-2588
cve-2022-21123
cve-2022-21125
cve-2022-21166
vmcore capture bug fix
bz#2107491
rhel8.6

0.001 Low

EPSS

Percentile

25.5%

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation (CVE-2022-2588)

  • hw: cpu: Incomplete cleanup of multi-core shared buffers (aka SBDR) (CVE-2022-21123)

  • hw: cpu: Incomplete cleanup of microarchitectural fill buffers (aka SBDS) (CVE-2022-21125)

  • hw: cpu: Incomplete cleanup in specific special register write operations (aka DRPW) (CVE-2022-21166)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • RHEL8.6[64TB/240c Denali]:" vmcore failed, _exitcode:139" error observed while capturing vmcore during fadump after memory remove. incomplete vmcore is captured. (BZ#2107491)