Red Hat Security Advisory: kernel security update

Fixed packages 25

Vulnerabilities 4

• Medium 5.5
  CVE-2022-21123

  Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potenti…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022
• Medium 5.5
  CVE-2022-21125

  Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to po…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022
• Medium 5.5
  CVE-2022-21166

  Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticate…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022
• Medium 5.3
  CVE-2022-2588 Public exploit

  It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the …

  The Linux Kernel Organization linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jan 8, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090237
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090240
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090241
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2114849
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6872.json
• report
  https://access.redhat.com/security/cve/CVE-2022-2588
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2588
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2588
• article
  https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2022-21123
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21123
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21123
• article
  https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/processor-mmio-stale-data-vulnerabilities.html
• report
  https://access.redhat.com/security/cve/CVE-2022-21125
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21125
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21125
• report
  https://access.redhat.com/security/cve/CVE-2022-21166
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21166
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21166