RLSA-2022:0176
RLSA-2022:0176 · Important: kernel-rt security and bug fix update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: xfs: raw block device data leak in XFS_IOC_ALLOCSP IOCTL (CVE-2021-4155) * kernel: fs_context: heap overflow in legacy parameter handling (CVE-2022-0185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernnel-rt-debug: do not call blocking ops when !TASK_RUNNING; state=1 set at [<0000000050e86018>] handle_userfault+0x530/0x1820 (BZ#2029422) * kernel-rt: update RT source tree to the Rocky Linux-8.5.z source tree (BZ#2032059)
CVSS 7.8 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-rt Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:4.18.0-348.12.2.rt7.143.el8_5
Update to 0:4.18.0-348.12.2.rt7.143.el8_5