RHSA-2022:0825 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 43

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos	bpftool	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	bpftool-debuginfo	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-abi-stablelists	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-core	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-core	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-debuginfo	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-devel	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-modules	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-modules-extra	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-aarch64	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-ppc64le	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-s390x	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-x86_64	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-devel	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-doc	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-modules	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-modules-extra	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-tools	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-tools-debuginfo	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-tools-libs	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-core	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-debuginfo	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-devel	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-modules	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-modules-extra	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	perf	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	perf-debuginfo	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	python3-perf	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::baseos	python3-perf-debuginfo	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::crb	bpftool-debuginfo	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debug-debuginfo	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo-common-aarch64	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo-common-ppc64le	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo-common-x86_64	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-tools-debuginfo	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-tools-libs-devel	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::crb	perf-debuginfo	0:4.18.0-348.20.1.el8_5
Red Hat · RHEL 8 enterprise_linux:8::crb	python3-perf-debuginfo	0:4.18.0-348.20.1.el8_5

Vulnerabilities 8

High 7.8

CVE-2022-0492 Exploited Public exploit

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. T…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 3, 2022
KEV Jun 2, 2026
High 7.8

CVE-2022-0847 Exploited Public exploit EPSS 93%

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 7, 2022
KEV Apr 25, 2022
Medium 6.4

CVE-2021-0920 Exploited

In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to loc…

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Dec 15, 2021
KEV May 23, 2022
High 7.8

CVE-2022-22942 Public exploit

The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 13, 2023
Unscored —

CVE-2021-4154 Public exploit

A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 par…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 4, 2022
Unscored —

CVE-2022-0330

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 25, 2022
Unscored —

CVE-2022-0435 Public exploit EPSS 68%

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 25, 2022
Unscored —

CVE-2022-0516

A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Lin…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 8, 2022

References

article
https://access.redhat.com/security/updates/classification/#important
article
https://access.redhat.com/security/vulnerabilities/RHSB-2022-002
report
https://bugzilla.redhat.com/show_bug.cgi?id=2031930
report
https://bugzilla.redhat.com/show_bug.cgi?id=2034514
report
https://bugzilla.redhat.com/show_bug.cgi?id=2042404
report
https://bugzilla.redhat.com/show_bug.cgi?id=2044809
report
https://bugzilla.redhat.com/show_bug.cgi?id=2048738
report
https://bugzilla.redhat.com/show_bug.cgi?id=2050237
report
https://bugzilla.redhat.com/show_bug.cgi?id=2051505
report
https://bugzilla.redhat.com/show_bug.cgi?id=2060795
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0825.json
report
https://access.redhat.com/security/cve/CVE-2021-0920
advisory
https://www.cve.org/CVERecord?id=CVE-2021-0920
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-0920
article
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cbcf01128d0a92e131bd09f1688fe032480b65ca
article
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
report
https://access.redhat.com/security/cve/CVE-2021-4154
advisory
https://www.cve.org/CVERecord?id=CVE-2021-4154
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-4154
article
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b0462726e7ef281c35a7a4ae33e93ee2bc9975b
report
https://access.redhat.com/security/cve/CVE-2022-0330
advisory
https://www.cve.org/CVERecord?id=CVE-2022-0330
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-0330
article
https://www.openwall.com/lists/oss-security/2022/01/25/12
report
https://access.redhat.com/security/cve/CVE-2022-0435
advisory
https://www.cve.org/CVERecord?id=CVE-2022-0435
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-0435
article
https://www.openwall.com/lists/oss-security/2022/02/10/1
report
https://access.redhat.com/security/cve/CVE-2022-0492
advisory
https://www.cve.org/CVERecord?id=CVE-2022-0492
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-0492
article
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af
report
https://access.redhat.com/security/cve/CVE-2022-0516
advisory
https://www.cve.org/CVERecord?id=CVE-2022-0516
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-0516
article
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=09a93c1df3eafa43bcdfd7bf837c574911f12f55
report
https://access.redhat.com/security/cve/CVE-2022-0847
advisory
https://www.cve.org/CVERecord?id=CVE-2022-0847
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-0847

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 43

Vulnerabilities 8

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. T…

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…

In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to loc…

The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to …

A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 par…

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may …

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with…

A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Lin…

References