ELSA-2022-8267 — Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 9)

Summary

[5.14.0-162.6.1_1.OL9]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]

[5.14.0-162.6.1_1]
- kabi: add symbol yield to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol xa_find_after to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol xa_find to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol xa_destroy to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol x86_spec_ctrl_base to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol x86_cpu_to_apicid to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol wait_for_completion_interruptible to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol wait_for_completion to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol vsprintf to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol vsnprintf to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol vprintk to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol vmemmap_base to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol vmalloc_base to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol vmalloc to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol vm_zone_stat to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol vm_event_states to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol vfree to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol uv_undefined to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol uv_teardown_irq to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol uv_setup_irq to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol uv_possible_blades to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol uv_get_hubless_system to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol uv_bios_obj_count to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol uv_bios_install_heap to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol uv_bios_get_pci_topology to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol uv_bios_get_master_nasid to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol uv_bios_get_heapsize to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol uv_bios_get_geoinfo to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol uv_bios_enum_ports to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol uv_bios_enum_objs to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol up_write to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol up_read to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol up to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol unregister_reboot_notifier to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol unregister_nmi_handler to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol unregister_netdevice_notifier to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol unregister_chrdev_region to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol unregister_blkdev to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol tsc_khz to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol try_wait_for_completion to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol touch_softlockup_watchdog to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol time64_to_tm to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol this_cpu_off to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol tasklet_unlock_wait to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol tasklet_kill to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol tasklet_init to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol system_wq to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol system_freezing_cnt to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol sys_tz to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol synchronize_rcu to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol strstr to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol strsep to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol strrchr to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol strnlen to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol strncpy_from_user to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol strncpy to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol strncmp to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol strncasecmp to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol strlen to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol strlcpy to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol strlcat to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol strcpy to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol strcmp to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol strchr to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol sscanf to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol sprintf to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol sort to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol snprintf to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol sn_region_size to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol sn_partition_id to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol smp_call_function_single_async to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol smp_call_function_single to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol smp_call_function_many to stablelist (cestmir Kalina) [2120286]
- kabi: add symbol sme_me_mask to stablelist (cestmir Kali

Fixed packages 22

Release	Package	Fixed in
Oracle Linux · 9	bpftool	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-abi-stablelists	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-core	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-cross-headers	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-debug	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-debug-core	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-debug-devel	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-debug-devel-matched	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-debug-modules	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-debug-modules-extra	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-devel	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-devel-matched	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-doc	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-headers	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-modules	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-modules-extra	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-tools	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-tools-libs	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	kernel-tools-libs-devel	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	perf	0:5.14.0-162.6.1.el9_1
Oracle Linux · 9	python3-perf	0:5.14.0-162.6.1.el9_1

Vulnerabilities 31

Medium 5.3

CVE-2022-2586 Exploited Public exploit EPSS 10%

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-…

The Linux Kernel Organization linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Jan 8, 2024
KEV Jun 26, 2024
High 7.8

CVE-2022-29581 Public exploit

Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege …

Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

May 17, 2022
High 7.5

CVE-2022-36946 Public exploit

nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Jul 27, 2022
Medium 6.7

CVE-2022-21499

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker w…

Oracle Oracle Linux Oracle VM linux-raspi2 Linux Debian Ubuntu

Jun 9, 2022
Medium 5.6

CVE-2022-29901

Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary…

Intel Intel Microprocessors linux-raspi2 linux-hwe Debian Ubuntu

Jul 12, 2022
Medium 5.5

CVE-2022-21123

Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potenti…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine

Jun 15, 2022
Medium 5.5

CVE-2022-21125

Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to po…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine

Jun 15, 2022
Medium 5.5

CVE-2022-21166

Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticate…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine

Jun 15, 2022
Medium 5.5

CVE-2022-26373

Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorize…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 18, 2022
Unscored —

CVE-2020-36516

An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 26, 2022
Unscored —

CVE-2021-3640

A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 3, 2022
Unscored —

CVE-2022-0168

A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Aug 26, 2022
Unscored —

CVE-2022-0617

A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers ud…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Feb 16, 2022
Unscored —

CVE-2022-0854

A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw al…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 23, 2022
Unscored —

CVE-2022-1016

A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Aug 29, 2022
Unscored —

CVE-2022-1048

A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PC…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Apr 29, 2022
Unscored —

CVE-2022-1184

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. Th…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 29, 2022
Unscored —

CVE-2022-1280

A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 13, 2022
Unscored —

CVE-2022-1353

A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a lo…

Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Apr 29, 2022
Unscored —

CVE-2022-1679 Public exploit

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 16, 2022
Unscored —

CVE-2022-1852

A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in th…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Jun 30, 2022
Unscored —

CVE-2022-1998

A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_reco…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Jun 9, 2022
Unscored —

CVE-2022-20368

Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Aug 11, 2022
Unscored —

CVE-2022-23816 Rejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

linux-hwe linux-azure linux-riscv linux-gcp Ubuntu Alpine

Jan 21, 2022
Unscored —

CVE-2022-23825

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to i…

AMD AMD Processors linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jul 14, 2022
Unscored —

CVE-2022-24448

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag,…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Feb 4, 2022
Unscored —

CVE-2022-2639 Public exploit

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, whi…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 1, 2022
Unscored —

CVE-2022-28390

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Apr 3, 2022
Unscored —

CVE-2022-28893

The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the i…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Apr 11, 2022
Unscored —

CVE-2022-29900 Public exploit

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain mic…

AMD AMD Processors linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jul 12, 2022
Unscored —

CVE-2022-39190

An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occ…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Sep 2, 2022

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 9)

Summary

Fixed packages 22

Vulnerabilities 31

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-…

Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege …

nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a …

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker w…

Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)

Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potenti…

Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to po…

Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticate…

Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorize…

An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID …

A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls …

A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c…

A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers ud…

A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw al…

A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. …

A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PC…

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. Th…

A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a …

A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a lo…

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9…

A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in th…

A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_reco…

Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to i…

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag,…

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, whi…

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the i…

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain mic…

An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occ…