Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Vulnerabilities 5

• Unscored —
  CVE-2022-1012

  A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table pe…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Aug 5, 2022
• Unscored —
  CVE-2022-1729

  A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Sep 1, 2022
• Unscored —
  CVE-2022-1966 Public exploit Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. …

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Jun 6, 2022
• Unscored —
  CVE-2022-27666 Public exploit

  A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This fla…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 23, 2022
• Unscored —
  CVE-2022-32250 Public exploit

  net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespace…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jun 2, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.0_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2061633
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2064604
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2086753
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2092427
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5267.json
• report
  https://access.redhat.com/security/cve/CVE-2022-1012
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1012
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1012
• article
  https://arxiv.org/abs/2209.12993
• article
  https://datatracker.ietf.org/doc/html/rfc6056#section-3.3.4
• article
  https://lore.kernel.org/lkml/20220428124001.7428-1-w@1wt.eu/
• article
  https://lwn.net/Articles/910435/
• report
  https://access.redhat.com/security/cve/CVE-2022-1729
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1729
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1729
• report
  https://access.redhat.com/security/cve/CVE-2022-1966
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2093146
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1966
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1966
• report
  https://access.redhat.com/security/cve/CVE-2022-27666
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-27666
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-27666
• article
  https://github.com/torvalds/linux/commit/ebe48d368e97d007bfeb76fcb065d6cfc4c96645
• report
  https://access.redhat.com/security/cve/CVE-2022-32250
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-32250
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-32250
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/net/netfilter?id=520778042ccca019f3ffa136dd0ca565c486cedd
• article
  https://www.openwall.com/lists/oss-security/2022/05/31/1