Summary
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* information leak in scsi_ioctl() (CVE-2022-0494)
* use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* update RT source tree to the latest AlmaLinux-9.0.z2 Batch (BZ#2105450)
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | kernel-rt | 5.14.0-70.22.1.rt21.94.el9_0 |
| AlmaLinux · 9 | kernel-rt-core | 5.14.0-70.22.1.rt21.94.el9_0 |
| AlmaLinux · 9 | kernel-rt-debug | 5.14.0-70.22.1.rt21.94.el9_0 |
| AlmaLinux · 9 | kernel-rt-debug-core | 5.14.0-70.22.1.rt21.94.el9_0 |
| AlmaLinux · 9 | kernel-rt-debug-devel | 5.14.0-70.22.1.rt21.94.el9_0 |
| AlmaLinux · 9 | kernel-rt-debug-kvm | 5.14.0-70.22.1.rt21.94.el9_0 |
| AlmaLinux · 9 | kernel-rt-debug-modules | 5.14.0-70.22.1.rt21.94.el9_0 |
| AlmaLinux · 9 | kernel-rt-debug-modules-extra | 5.14.0-70.22.1.rt21.94.el9_0 |
| AlmaLinux · 9 | kernel-rt-devel | 5.14.0-70.22.1.rt21.94.el9_0 |
| AlmaLinux · 9 | kernel-rt-kvm | 5.14.0-70.22.1.rt21.94.el9_0 |
| AlmaLinux · 9 | kernel-rt-modules | 5.14.0-70.22.1.rt21.94.el9_0 |
| AlmaLinux · 9 | kernel-rt-modules-extra | 5.14.0-70.22.1.rt21.94.el9_0 |
Vulnerabilities 2
-
High 8.6
Use after Free in tc_new_tfilter allowing for privilege escalation in Linux Kernel
A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
-
Unscored —
A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kern…