Summary
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* posix cpu timer use-after-free may lead to local privilege escalation (CVE-2022-2585)
* Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Update RT source tree to the latest AlmaLinux-9.0.z4 Batch (BZ#2123498)
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | kernel-rt | 5.14.0-70.30.1.rt21.102.el9_0 |
| AlmaLinux · 9 | kernel-rt-core | 5.14.0-70.30.1.rt21.102.el9_0 |
| AlmaLinux · 9 | kernel-rt-debug | 5.14.0-70.30.1.rt21.102.el9_0 |
| AlmaLinux · 9 | kernel-rt-debug-core | 5.14.0-70.30.1.rt21.102.el9_0 |
| AlmaLinux · 9 | kernel-rt-debug-devel | 5.14.0-70.30.1.rt21.102.el9_0 |
| AlmaLinux · 9 | kernel-rt-debug-kvm | 5.14.0-70.30.1.rt21.102.el9_0 |
| AlmaLinux · 9 | kernel-rt-debug-modules | 5.14.0-70.30.1.rt21.102.el9_0 |
| AlmaLinux · 9 | kernel-rt-debug-modules-extra | 5.14.0-70.30.1.rt21.102.el9_0 |
| AlmaLinux · 9 | kernel-rt-devel | 5.14.0-70.30.1.rt21.102.el9_0 |
| AlmaLinux · 9 | kernel-rt-kvm | 5.14.0-70.30.1.rt21.102.el9_0 |
| AlmaLinux · 9 | kernel-rt-modules | 5.14.0-70.30.1.rt21.102.el9_0 |
| AlmaLinux · 9 | kernel-rt-modules-extra | 5.14.0-70.30.1.rt21.102.el9_0 |
Vulnerabilities 2
-
Medium 5.3
It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed…
-
Unscored —CVE-2022-30594 Public exploit
The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass in…