Summary
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959)
* kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)
* kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139)
* kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)
* kernel: i2c: unbounded length leads to buffer overflow in ismt_access() (CVE-2022-3077)
* kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* DELL EMC: System is not booting into RT Kernel with perc12 [kernel-rt] (BZ#2139863)
* kernel-rt: update RT source tree to the latest AlmaLinux-9.1.z1 Batch (BZ#2141817)
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | kernel-rt | 5.14.0-162.12.1.rt21.175.el9_1 |
| AlmaLinux · 9 | kernel-rt-core | 5.14.0-162.12.1.rt21.175.el9_1 |
| AlmaLinux · 9 | kernel-rt-debug | 5.14.0-162.12.1.rt21.175.el9_1 |
| AlmaLinux · 9 | kernel-rt-debug-core | 5.14.0-162.12.1.rt21.175.el9_1 |
| AlmaLinux · 9 | kernel-rt-debug-devel | 5.14.0-162.12.1.rt21.175.el9_1 |
| AlmaLinux · 9 | kernel-rt-debug-kvm | 5.14.0-162.12.1.rt21.175.el9_1 |
| AlmaLinux · 9 | kernel-rt-debug-modules | 5.14.0-162.12.1.rt21.175.el9_1 |
| AlmaLinux · 9 | kernel-rt-debug-modules-extra | 5.14.0-162.12.1.rt21.175.el9_1 |
| AlmaLinux · 9 | kernel-rt-devel | 5.14.0-162.12.1.rt21.175.el9_1 |
| AlmaLinux · 9 | kernel-rt-kvm | 5.14.0-162.12.1.rt21.175.el9_1 |
| AlmaLinux · 9 | kernel-rt-modules | 5.14.0-162.12.1.rt21.175.el9_1 |
| AlmaLinux · 9 | kernel-rt-modules-extra | 5.14.0-162.12.1.rt21.175.el9_1 |
Vulnerabilities 6
-
High 7.8
An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memo…
-
High 7.5
The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks…
-
Unscored —
A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific …
-
Unscored —
A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The…
-
Unscored —CVE-2022-30594 Public exploit
The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass in…
-
Unscored —
A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it h…
References
-
report
https://access.redhat.com/security/cve/CVE-2022-2959
-
report
https://access.redhat.com/security/cve/CVE-2022-2964
-
report
https://access.redhat.com/security/cve/CVE-2022-30594
-
report
https://access.redhat.com/security/cve/CVE-2022-3077
-
report
https://access.redhat.com/security/cve/CVE-2022-4139
-
report
https://access.redhat.com/security/cve/CVE-2022-43945
-
report
https://bugzilla.redhat.com/2067482
-
report
https://bugzilla.redhat.com/2085300
-
report
https://bugzilla.redhat.com/2103681
-
report
https://bugzilla.redhat.com/2123309
-
report
https://bugzilla.redhat.com/2141752
-
report
https://bugzilla.redhat.com/2147572
-
advisory
https://errata.almalinux.org/9/ALSA-2023-0300.html