Lucene search

K
redhatRedHatRHSA-2022:7319
HistoryNov 02, 2022 - 1:52 p.m.

(RHSA-2022:7319) Important: kernel-rt security and bug fix update

2022-11-0213:52:24
access.redhat.com
12
kernel-rt
security fix
bug fix
determinism requirements
local privilege escalation
unprivileged users
ptrace_seize
ptrace_o_suspend_seccomp
cvss score
rhel-9.0.z4 batch

0.001 Low

EPSS

Percentile

44.3%

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • posix cpu timer use-after-free may lead to local privilege escalation (CVE-2022-2585)

  • Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Update RT source tree to the latest RHEL-9.0.z4 Batch (BZ#2123498)