Summary
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* information leak in scsi_ioctl() (CVE-2022-0494)
* use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Power9 - LPAR fails to boot in shared processing mode and call traces are seen [Hash] (BZ#2092248)
* Hard lockups are observed while running stress-ng and LPAR hangs (BZ#2092253)
* FIPS module identification via name and version (BZ#2093384)
* gfs2: File corruption with large writes when memory is tight (BZ#2097306)
* i/o on initiator stuck when network is disrupted (4.18.0-372.9.1.el8.x86_64) (BZ#2098251)
* AlmaLinux 9.1 doesn't support 3rd SATA (BZ#2099740)
* Guest call trace when reboot after postcopy migration with high stress workload (BZ#2100903)
* Oops or general protection fault with RIP decode_attr_security_label at decode_getfattr_attrs (BZ#2101854)
* Oops as BUG: unable to handle page fault as free of uninitialized nfs4_label on nfs referral lookup (BZ#2101858)
* lpar crash with Oops: Kernel access of bad area, sig: 11 [#1] when changing mtu of a bond interface (P10/ ibmvnic/ Haleakala) (BZ#2103085)
* OS doesn't boot when vmd and interrupt remapping are enabled (BZ#2109974)
Enhancement(s):
* iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (BZ#2105326)
Fixed packages 28
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | bpftool | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-abi-stablelists | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-core | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-cross-headers | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-debug | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-debug-core | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-debug-devel | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-debug-devel-matched | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-debug-modules | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-debug-modules-extra | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-devel | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-devel-matched | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-doc | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-headers | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-modules | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-modules-extra | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-tools | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-tools-libs | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-tools-libs-devel | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-zfcpdump | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-zfcpdump-core | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-zfcpdump-devel | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-zfcpdump-devel-matched | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-zfcpdump-modules | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | kernel-zfcpdump-modules-extra | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | perf | 5.14.0-70.22.1.el9_0 |
| AlmaLinux · 9 | python3-perf | 5.14.0-70.22.1.el9_0 |
Vulnerabilities 2
-
High 8.6
Use after Free in tc_new_tfilter allowing for privilege escalation in Linux Kernel
A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
-
Unscored —
A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kern…