Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Vulnerabilities 6

• Medium 5.5
  CVE-2022-21123

  Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potenti…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022
• Medium 5.5
  CVE-2022-21125

  Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to po…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022
• Medium 5.5
  CVE-2022-21166

  Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticate…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022
• Medium 5.3
  CVE-2022-2588 Public exploit

  It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the …

  The Linux Kernel Organization linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jan 8, 2024
• Unscored —
  CVE-2021-45485 Public exploit

  In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Dec 25, 2021
• Unscored —
  CVE-2021-45486

  In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Dec 25, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2039911
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2039914
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090237
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090240
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090241
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2114849
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6991.json
• report
  https://access.redhat.com/security/cve/CVE-2021-45485
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-45485
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-45485
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=62f20e068ccc50d6ab66fdb72ba90da2b9418c99
• article
  https://lore.kernel.org/all/20210529110746.6796-1-w@1wt.eu/
• report
  https://access.redhat.com/security/cve/CVE-2021-45486
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-45486
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-45486
• article
  https://arxiv.org/pdf/2112.09604.pdf
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/net/ipv4/route.c?id=aa6dd211e4b1dde9d5dc25d699d35f789ae7eeba
• report
  https://access.redhat.com/security/cve/CVE-2022-2588
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2588
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2588
• article
  https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2022-21123
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21123
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21123
• article
  https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/processor-mmio-stale-data-vulnerabilities.html
• report
  https://access.redhat.com/security/cve/CVE-2022-21125
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21125
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21125
• report
  https://access.redhat.com/security/cve/CVE-2022-21166
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21166
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21166