Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 52

Vulnerabilities 6

• High 7.8
  CVE-2022-49557

  x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave)

  In the Linux kernel, the following vulnerability has been resolved: x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave) Set the starting uABI size of KVM's guest FPU to 'struct kvm_xsave', i.e. to KVM's historical uABI size. When saving…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 26, 2025
• High 7.8
  CVE-2022-49722

  ice: Fix memory corruption in VF driver

  In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory corruption in VF driver Disable VF's RX/TX queues, when it's disabled. VF can have queues enabled, when it requests a reset. If PF driver assumes that VF is disabled, while VF…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 26, 2025
• High 7.1
  CVE-2022-48943

  KVM: x86/mmu: make apf token non-zero to fix bug

  In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: make apf token non-zero to fix bug In current async pagefault logic, when a page is ready, KVM relies on kvm_arch_can_dequeue_async_page_present() to determine whether to delive…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 22, 2024
• Medium 5.5
  CVE-2022-21123

  Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potenti…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022
• Medium 5.5
  CVE-2022-21125

  Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to po…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022
• Medium 5.5
  CVE-2022-21166

  Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticate…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090237
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090240
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090241
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6460.json
• report
  https://access.redhat.com/security/cve/CVE-2022-21123
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21123
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21123
• article
  https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/processor-mmio-stale-data-vulnerabilities.html
• report
  https://access.redhat.com/security/cve/CVE-2022-21125
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21125
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21125
• report
  https://access.redhat.com/security/cve/CVE-2022-21166
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21166
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21166
• report
  https://access.redhat.com/security/cve/CVE-2022-48943
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2307199
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-48943
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-48943
• article
  https://lore.kernel.org/linux-cve-announce/2024082227-CVE-2022-48943-8e11@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-49557
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2348183
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-49557
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-49557
• article
  https://lore.kernel.org/linux-cve-announce/2025022617-CVE-2022-49557-f9a3@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-49722
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2348117
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-49722
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-49722
• article
  https://lore.kernel.org/linux-cve-announce/2025022632-CVE-2022-49722-9d4e@gregkh/T