Skip to content
OpenAdvisories
High ALSA-2022:5249 4 CVEs

Important: kernel security and bug fix update

Published Jul 1, 2022 · Updated Oct 29, 2026

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak (CVE-2022-1012)
* kernel: race condition in perf_event_open leads to privilege escalation (CVE-2022-1729)
* kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root (CVE-2022-1966)
* kernel: buffer overflow in IPsec ESP transformation code (CVE-2022-27666)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* make SHA512_arch algos and CRYPTO_USER built-ins (BZ#2072643)
* SR-IOV performance > 50% degradation (BZ#2074830)
* fix data corruption caused by dm-integrity (BZ#2082187)
* SCTP client-side peeloff issues [almalinux-9] (BZ#2084044)
* TCP connection fails in a asymmetric routing situation (BZ#2085480)
* Fails to boot Multiple RT VMs each with multiple vCPUs (BZ#2086963)
* spec: Fix separate tools build (BZ#2090852)
* call traces related to eeh_pseries observed and vmcore is not captured, when kdump is triggered (BZ#2092255)
* Mark ThunderX NIC driver as unmaintained (BZ#2092638)

Fixed packages 28

ReleasePackageFixed in
AlmaLinux · 9 bpftool 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-abi-stablelists 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-core 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-cross-headers 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-debug 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-debug-core 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-debug-devel 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-debug-devel-matched 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-debug-modules 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-debug-modules-extra 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-devel 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-devel-matched 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-doc 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-headers 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-modules 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-modules-extra 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-tools 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-tools-libs 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-tools-libs-devel 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-zfcpdump 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-zfcpdump-core 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-zfcpdump-devel 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-zfcpdump-devel-matched 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-zfcpdump-modules 5.14.0-70.17.1.el9_0
AlmaLinux · 9 kernel-zfcpdump-modules-extra 5.14.0-70.17.1.el9_0
AlmaLinux · 9 perf 5.14.0-70.17.1.el9_0
AlmaLinux · 9 python3-perf 5.14.0-70.17.1.el9_0

Vulnerabilities 4

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-1012
  • report
    https://access.redhat.com/security/cve/CVE-2022-1729
  • report
    https://access.redhat.com/security/cve/CVE-2022-1966
  • report
    https://access.redhat.com/security/cve/CVE-2022-27666
  • report
    https://bugzilla.redhat.com/2061633
  • report
    https://bugzilla.redhat.com/2064604
  • report
    https://bugzilla.redhat.com/2086753
  • report
    https://bugzilla.redhat.com/2092427
  • advisory
    https://errata.almalinux.org/9/ALSA-2022-5249.html