Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2022:7338
HistoryNov 02, 2022 - 4:04 p.m.

(RHSA-2022:7338) Important: kernel-rt security and bug fix update

2022-11-0216:04:02
access.redhat.com
24
kernel-rt
security fix
bug fix
use-after-free
speculative code execution
branch type confusion
rhel7.9.z18
determinism

0.001 Low

EPSS

Percentile

31.2%

JSON

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • A use-after-free in cls_route filter implementation may lead to privilege escalation (CVE-2022-2588)

  • RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816, CVE-2022-29900)

  • Branch Type Confusion (non-retbleed) (CVE-2022-23825)

  • Intel: Post-barrier Return Stack Buffer Predictions (CVE-2022-26373)

  • Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Update to the latest RHEL7.9.z18 source tree (BZ#2117337)
OSVersionArchitecturePackageVersionFilename
RedHat7x86_64kernel-rt-debug-kvm< 3.10.0-1160.80.1.rt56.1225.el7kernel-rt-debug-kvm-3.10.0-1160.80.1.rt56.1225.el7.x86_64.rpm
RedHat7x86_64kernel-rt-devel< 3.10.0-1160.80.1.rt56.1225.el7kernel-rt-devel-3.10.0-1160.80.1.rt56.1225.el7.x86_64.rpm
RedHat7x86_64kernel-rt-trace< 3.10.0-1160.80.1.rt56.1225.el7kernel-rt-trace-3.10.0-1160.80.1.rt56.1225.el7.x86_64.rpm
RedHat7x86_64kernel-rt-trace-devel< 3.10.0-1160.80.1.rt56.1225.el7kernel-rt-trace-devel-3.10.0-1160.80.1.rt56.1225.el7.x86_64.rpm
RedHat7x86_64kernel-rt-debug-kvm-debuginfo< 3.10.0-1160.80.1.rt56.1225.el7kernel-rt-debug-kvm-debuginfo-3.10.0-1160.80.1.rt56.1225.el7.x86_64.rpm
RedHat7x86_64kernel-rt-debuginfo-common-x86_64< 3.10.0-1160.80.1.rt56.1225.el7kernel-rt-debuginfo-common-x86_64-3.10.0-1160.80.1.rt56.1225.el7.x86_64.rpm
RedHat7x86_64kernel-rt-debug< 3.10.0-1160.80.1.rt56.1225.el7kernel-rt-debug-3.10.0-1160.80.1.rt56.1225.el7.x86_64.rpm
RedHat7x86_64kernel-rt-kvm< 3.10.0-1160.80.1.rt56.1225.el7kernel-rt-kvm-3.10.0-1160.80.1.rt56.1225.el7.x86_64.rpm
RedHat7x86_64kernel-rt-debug-devel< 3.10.0-1160.80.1.rt56.1225.el7kernel-rt-debug-devel-3.10.0-1160.80.1.rt56.1225.el7.x86_64.rpm
RedHat7x86_64kernel-rt-trace-kvm< 3.10.0-1160.80.1.rt56.1225.el7kernel-rt-trace-kvm-3.10.0-1160.80.1.rt56.1225.el7.x86_64.rpm
Rows per page:
1-10 of 171

Related

redhat 10
vmware 3
nessus 45
oraclelinux 15
ibm 2
openvas 24
fedora 4
xen 1
hp 1
osv 12
almalinux 2
rocky 2
citrix 1
amd 1
amazon 2
mscve 3
f5 5
ubuntu 2
debian 3
thn 1
mageia 3
redhatcve 8
photon 1
cve 6
ubuntucve 6
intel 3
cvelist 6
nvd 5
veracode 6
debiancve 6
prion 5
suse 2
zdi 1
githubexploit 2
redhat
redhat
(RHSA-2022:7337) Important: kernel security and bug fix update
2022-11-02 16:03:50
(RHSA-2022:7134) Important: kernel-rt security and bug fix update
2022-10-25 07:38:43
(RHSA-2022:7110) Important: kernel security, bug fix, and enhancement update
2022-10-25 07:23:52
vmware
vmware
VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities
2022-07-12 00:00:00
VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities
2022-07-12 00:00:00
VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities
2022-07-12 00:00:00
nessus
nessus
VMware ESXi 6.5 / 6.7 / 7.0 Multiple Vulnerabilities (VMSA-2022-0020)
2024-03-22 00:00:00
RHEL 7 : kernel-rt (RHSA-2022:7338)
2022-11-03 00:00:00
Scientific Linux Security Update : kernel on SL7.x x86_64 (2022:7337)
2022-11-10 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2022-11-03 00:00:00
kernel security, bug fix, and enhancement update
2022-10-26 00:00:00
Unbreakable Enterprise kernel security update
2024-06-12 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in VMware ESXi affect IBM Cloud Pak System
2023-03-31 16:13:36
Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
2023-03-29 18:49:02
openvas
openvas
Fedora: Security Advisory for kernel (FEDORA-2022-c69ef9c1dd)
2022-07-15 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2022-8aab5b5cde)
2022-07-16 00:00:00
Fedora: Security Advisory for xen (FEDORA-2022-3e6ce58029)
2022-07-19 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: kernel-5.18.11-200.fc36
2022-07-14 01:49:14
[SECURITY] Fedora 35 Update: kernel-5.18.11-100.fc35
2022-07-15 01:37:00
[SECURITY] Fedora 36 Update: xen-4.16.1-6.fc36
2022-07-18 01:09:01
xen
xen
Retbleed - arbitrary speculative code execution with return instructions
2022-07-12 16:35:00
hp
hp
HP Wolf Security Software July 2022 Update
2022-07-12 00:00:00
osv
osv
Important: kernel-rt security and bug fix update
2022-10-25 00:00:00
Important: kernel-rt security and bug fix update
2022-10-25 07:38:43
Important: kernel security, bug fix, and enhancement update
2022-10-25 07:23:52
almalinux
almalinux
Important: kernel-rt security and bug fix update
2022-10-25 00:00:00
Important: kernel security, bug fix, and enhancement update
2022-10-25 00:00:00
rocky
rocky
kernel-rt security and bug fix update
2022-10-25 07:38:43
kernel security, bug fix, and enhancement update
2022-10-25 07:23:52
citrix
citrix
Citrix Hypervisor Security Bulletin for CVE-2022-23825 and CVE-2022-29900
2022-07-12 16:49:54
amd
amd
AMD CPU Branch Type Confusion
2022-07-12 00:00:00
amazon
amazon
Important: kernel
2022-09-01 21:09:00
Important: kernel
2022-09-01 21:09:00
mscve
mscve
AMD: CVE-2022-29900 AMD CPU Branch Type Confusion
2022-07-12 07:00:00
AMD: CVE-2022-23816 AMD CPU Branch Type Confusion
2022-07-12 07:00:00
AMD: CVE-2022-23825 AMD CPU Branch Type Confusion
2022-07-12 07:00:00
f5
f5
K83713003 : RetBleed CPU vulnerability CVE-2022-29901
2022-08-02 00:00:00
K57185580 : RetBleed CPU vulnerability CVE-2022-29900
2022-08-02 00:00:00
K69334442 : Intel Processors RRSBA advisory CVE-2022-28693
2022-11-11 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2022-08-10 00:00:00
Linux kernel vulnerabilities
2022-08-10 00:00:00
debian
debian
[SECURITY] [DLA 3102-1] linux-5.10 new package
2022-09-11 19:35:03
[SECURITY] [DSA 5207-1] linux security update
2022-08-15 19:52:20
[SECURITY] [DSA 5184-1] xen security update
2022-07-15 18:05:47
thn
thn
New 'Retbleed' Speculative Execution Attack Affects AMD and Intel CPUs
2022-07-13 14:22:00
mageia
mageia
Updated kernel-linus packages fix security vulnerabilities
2022-08-06 18:43:47
Updated kernel packages fix security vulnerabilities
2022-08-06 18:43:47
Updated kernel packages fix security vulnerabilities
2022-08-26 00:21:07
redhatcve
redhatcve
CVE-2022-23824
2022-11-09 12:26:05
CVE-2022-28693
2022-07-15 07:06:11
CVE-2022-23816
2022-07-13 04:44:07
photon
photon
Important Photon OS Security Update - PHSA-2022-0248
2022-09-20 00:00:00
cve
cve
CVE-2022-28693
2022-07-13 17:49:50
CVE-2022-23825
2022-07-14 20:15:08
CVE-2022-23816
2023-01-17 06:15:10
ubuntucve
ubuntucve
CVE-2022-28693
2022-07-12 00:00:00
CVE-2022-23825
2022-07-12 00:00:00
CVE-2022-23816
2022-07-13 00:00:00
intel
intel
Intel® Processors RRSBA Advisory
2022-07-12 00:00:00
Intel® Processors Post Invalidation RSB Advisory
2022-08-09 00:00:00
Intel® Processors Return Stack Buffer Underflow Advisory
2022-07-12 00:00:00
cvelist
cvelist
CVE-2022-23825
2022-07-14 00:00:00
CVE-2022-23816
1976-01-01 00:00:00
CVE-2022-29901 Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)
2022-07-12 00:00:00
nvd
nvd
CVE-2022-23816
2023-01-17 06:15:10
CVE-2022-29901
2022-07-12 19:15:08
CVE-2022-29900
2022-07-12 19:15:08
veracode
veracode
Arbitrary Code Execution
2022-07-14 20:38:30
Arbitrary Code Execution
2022-07-15 02:32:22
Information Disclosure
2022-07-15 01:44:11
debiancve
debiancve
CVE-2022-23816
2023-01-17 06:15:00
CVE-2022-23825
2022-07-14 20:15:08
CVE-2022-26373
2022-08-18 20:15:11
prion
prion
Design/Logic Flaw
2022-07-12 19:15:00
Design/Logic Flaw
2022-07-12 19:15:00
Information disclosure
2022-08-18 20:15:00
suse
suse
Security update for xen (important)
2022-07-29 00:00:00
Security update for xen (important)
2022-07-29 00:00:00
zdi
zdi
(Pwn2Own) Linux Kernel route4_change Double Free Privilege Escalation Vulnerability
2022-08-18 00:00:00
githubexploit
githubexploit
Exploit for Use After Free in Linux Linux Kernel
2022-12-04 22:10:57
Exploit for Use After Free in Linux Linux Kernel
2023-03-09 21:29:56

0.001 Low

EPSS

Percentile

31.2%

JSON
Related for RHSA-2022:7338
redhat10vmware3nessus45oraclelinux15ibm2openvas24fedora4xen1hp1osv12almalinux2rocky2citrix1amd1amazon2mscve3f55ubuntu2debian3thn1mageia3redhatcve8photon1cve6ubuntucve6intel3cvelist6nvd5veracode6debiancve6prion5suse2zdi1githubexploit2