Lucene search

VirtuozzoVZA-2023-003

HistoryFeb 14, 2023 - 12:00 a.m.

[Important] [Security] Virtuozzo ReadyKernel Patch 153.1 for Virtuozzo Hybrid Server 7.5

2023-02-1400:00:00

docs.virtuozzo.com

virtuozzo readykernel

patch 153.1

security update

virtuozzo hybrid server 7.5

vulnerability cve-2021-45868

vulnerability cve-2022-1353

vulnerability psbm-145263

vulnerability psbm-141114

kernel

data leak

memory leak

security fixes

unix

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS

0.001

Percentile

38.1%

JSON

The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5.
Vulnerability id: CVE-2021-45868
[3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Quota: check the block number when reading the block in a quota file.

Vulnerability id: CVE-2022-1353
[3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Kernel data leak in ‘pfkey_register’.

Vulnerability id: PSBM-145263
[3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Virtualize timestamps in ‘/dev/kmsg’ and syslog outputs.

Vulnerability id: PSBM-141114
[3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Netfilter per-CPU memory leak on error path.

OSVersionArchitecturePackageVersionFilename
Virtuozzo Hybrid Server7.5x86_64readykernel-patch-183.5< 153.1-1.vl7readykernel-patch-183.5-153.1-1.vl7.x86_64.rpm
Virtuozzo Hybrid Server7.5x86_64readykernel-patch-185.3< 153.1-1.vl7readykernel-patch-185.3-153.1-1.vl7.x86_64.rpm
Virtuozzo Hybrid Server7.5x86_64readykernel-patch-191.4< 153.1-1.vl7readykernel-patch-191.4-153.1-1.vl7.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
Virtuozzo Hybrid Server	7.5	x86_64	readykernel-patch-183.5	< 153.1-1.vl7	readykernel-patch-183.5-153.1-1.vl7.x86_64.rpm
Virtuozzo Hybrid Server	7.5	x86_64	readykernel-patch-185.3	< 153.1-1.vl7	readykernel-patch-185.3-153.1-1.vl7.x86_64.rpm
Virtuozzo Hybrid Server	7.5	x86_64	readykernel-patch-191.4	< 153.1-1.vl7	readykernel-patch-191.4-153.1-1.vl7.x86_64.rpm