Summary
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation (CVE-2022-2588)
* kernel: information leak in scsi_ioctl() (CVE-2022-0494)
* Kernel: A kernel-info-leak issue in pfkey_register (CVE-2022-1353)
* hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816, CVE-2022-29900)
* hw: cpu: AMD: Branch Type Confusion (non-retbleed) (CVE-2022-23825)
* hw: cpu: Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* [almalinux8-rt] BUG: using __this_cpu_add() in preemptible [00000000] - caller is __mod_memcg_lruvec_state+0x69/0x1c0 (BZ#2122600)
* The latest AlmaLinux 8.6.z4 kernel changes need to be merged into the RT source tree to keep source parity between the two kernels. (BZ#2125396)
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | kernel-rt | 4.18.0-372.32.1.rt7.189.el8_6 |
| AlmaLinux · 8 | kernel-rt-core | 4.18.0-372.32.1.rt7.189.el8_6 |
| AlmaLinux · 8 | kernel-rt-debug | 4.18.0-372.32.1.rt7.189.el8_6 |
| AlmaLinux · 8 | kernel-rt-debug-core | 4.18.0-372.32.1.rt7.189.el8_6 |
| AlmaLinux · 8 | kernel-rt-debug-devel | 4.18.0-372.32.1.rt7.189.el8_6 |
| AlmaLinux · 8 | kernel-rt-debug-kvm | 4.18.0-372.32.1.rt7.189.el8_6 |
| AlmaLinux · 8 | kernel-rt-debug-modules | 4.18.0-372.32.1.rt7.189.el8_6 |
| AlmaLinux · 8 | kernel-rt-debug-modules-extra | 4.18.0-372.32.1.rt7.189.el8_6 |
| AlmaLinux · 8 | kernel-rt-devel | 4.18.0-372.32.1.rt7.189.el8_6 |
| AlmaLinux · 8 | kernel-rt-kvm | 4.18.0-372.32.1.rt7.189.el8_6 |
| AlmaLinux · 8 | kernel-rt-modules | 4.18.0-372.32.1.rt7.189.el8_6 |
| AlmaLinux · 8 | kernel-rt-modules-extra | 4.18.0-372.32.1.rt7.189.el8_6 |
Vulnerabilities 7
-
Medium 5.6
Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)
Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary…
-
Medium 5.3CVE-2022-2588 Public exploit
It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the …
-
Unscored —
A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kern…
-
Unscored —
A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a lo…
-
Unscored —CVE-2022-23816 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
-
Unscored —
Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to i…
-
Unscored —CVE-2022-29900 Public exploit
Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain mic…
References
-
report
https://access.redhat.com/security/cve/CVE-2022-0494
-
report
https://access.redhat.com/security/cve/CVE-2022-1353
-
report
https://access.redhat.com/security/cve/CVE-2022-23816
-
report
https://access.redhat.com/security/cve/CVE-2022-23825
-
report
https://access.redhat.com/security/cve/CVE-2022-2588
-
report
https://access.redhat.com/security/cve/CVE-2022-29900
-
report
https://access.redhat.com/security/cve/CVE-2022-29901
-
report
https://bugzilla.redhat.com/2039448
-
report
https://bugzilla.redhat.com/2066819
-
report
https://bugzilla.redhat.com/2090226
-
report
https://bugzilla.redhat.com/2103148
-
report
https://bugzilla.redhat.com/2103153
-
report
https://bugzilla.redhat.com/2114849
-
advisory
https://errata.almalinux.org/8/ALSA-2022-7134.html