Skip to content
OpenAdvisories
Critical RHSA-2022:6003 4 CVEs

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 59

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream bpftool-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debug-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debug-devel 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debug-devel-matched 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debuginfo-common-aarch64 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debuginfo-common-ppc64le 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debuginfo-common-s390x 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debuginfo-common-x86_64 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-devel 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-devel-matched 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-doc 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-tools-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-zfcpdump-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-zfcpdump-devel 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-zfcpdump-devel-matched 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream perf 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream perf-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-perf-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos bpftool 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos bpftool-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-abi-stablelists 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-core 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-core 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-modules 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-modules-extra 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debuginfo-common-aarch64 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debuginfo-common-ppc64le 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debuginfo-common-s390x 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debuginfo-common-x86_64 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-modules 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-modules-extra 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-tools 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-tools-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-tools-libs 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump-core 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump-modules 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump-modules-extra 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos perf-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos python3-perf 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::baseos python3-perf-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::crb bpftool-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debug-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debuginfo-common-aarch64 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debuginfo-common-ppc64le 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debuginfo-common-s390x 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debuginfo-common-x86_64 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-tools-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-tools-libs-devel 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-zfcpdump-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::crb perf-debuginfo 0:5.14.0-70.22.1.el9_0
Red Hat · RHEL 9 enterprise_linux:9::crb python3-perf-debuginfo 0:5.14.0-70.22.1.el9_0

Vulnerabilities 4

  • Critical 9.8
    CVE-2022-49418

    NFSv4: Fix free of uninitialized nfs4_label on referral lookup.

    In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix free of uninitialized nfs4_label on referral lookup. Send along the already-allocated fattr along with nfs4_fs_locations, and drop the memcpy of fattr. We end up growing two more a…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.6
    CVE-2022-1055

    Use after Free in tc_new_tfilter allowing for privilege escalation in Linux Kernel

    A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2022-48943

    KVM: x86/mmu: make apf token non-zero to fix bug

    In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: make apf token non-zero to fix bug In current async pagefault logic, when a page is ready, KVM relies on kvm_arch_can_dequeue_async_page_present() to determine whether to delive…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2022-0494

    A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kern…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2039448
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2070220
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6003.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-0494
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-0494
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-0494
  • article
    https://lore.kernel.org/all/20220216084038.15635-1-tcs.kernel@gmail.com/
  • report
    https://access.redhat.com/security/cve/CVE-2022-1055
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-1055
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-1055
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
  • article
    https://syzkaller.appspot.com/bug?id=2212474c958978ab86525fe6832ac8102c309ffc
  • report
    https://access.redhat.com/security/cve/CVE-2022-48943
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2307199
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-48943
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-48943
  • article
    https://lore.kernel.org/linux-cve-announce/2024082227-CVE-2022-48943-8e11@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-49418
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2348347
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-49418
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-49418
  • article
    https://lore.kernel.org/linux-cve-announce/2025022653-CVE-2022-49418-ff01@gregkh/T