Summary
[5.15.0-0.30.20.1]
- lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg) [Orabug: 34386636] {CVE-2022-21505}
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:5.15.0-0.30.20.1.el9uek |
| Oracle Linux · 8 | kernel-uek | 0:5.15.0-0.30.20.1.el9uek |
| Oracle Linux · 8 | kernel-uek-core | 0:5.15.0-0.30.20.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug | 0:5.15.0-0.30.20.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-core | 0:5.15.0-0.30.20.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-devel | 0:5.15.0-0.30.20.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules | 0:5.15.0-0.30.20.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules-extra | 0:5.15.0-0.30.20.1.el9uek |
| Oracle Linux · 8 | kernel-uek-devel | 0:5.15.0-0.30.20.1.el9uek |
| Oracle Linux · 8 | kernel-uek-doc | 0:5.15.0-0.30.20.1.el9uek |
| Oracle Linux · 8 | kernel-uek-modules | 0:5.15.0-0.30.20.1.el9uek |
| Oracle Linux · 8 | kernel-uek-modules-extra | 0:5.15.0-0.30.20.1.el9uek |
Vulnerabilities 1
-
Medium 6.7
In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kex…