Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 43

Vulnerabilities 3

• Medium 4.4
  CVE-2021-4037

  Kernel: security regression for cve-2018-13405

  A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a sc…

  Linux Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  Aug 24, 2022
• Unscored —
  CVE-2021-20322

  A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functiona…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Feb 18, 2022
• Unscored —
  CVE-2022-27666 Public exploit

  A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This fla…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 23, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2014230
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2027239
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2061633
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4829.json
• report
  https://access.redhat.com/security/cve/CVE-2021-4037
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-4037
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-4037
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=01ea173e103e
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848
• report
  https://access.redhat.com/security/cve/CVE-2021-20322
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-20322
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-20322
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.15-rc6&id=4785305c05b25a242e5314cc821f54ade4c18810
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.15-rc6&id=6457378fe796815c973f631a1904e147d6ee33b1
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/ipv4/route.c?h=v5.15-rc6&id=67d6d681e15b578c1725bad8ad079e05d1c48a8e
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/ipv6/route.c?h=v5.15-rc6&id=a00df2caffed3883c341d5685f830434312e4a43
• report
  https://access.redhat.com/security/cve/CVE-2022-27666
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-27666
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-27666
• article
  https://github.com/torvalds/linux/commit/ebe48d368e97d007bfeb76fcb065d6cfc4c96645