Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 52

Vulnerabilities 13

• Medium 5.6
  CVE-2022-29901

  Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)

  Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary…

  Intel Intel Microprocessors linux-raspi2 linux-hwe Debian Ubuntu
  Jul 12, 2022
• Medium 5.3
  CVE-2022-2588 Public exploit

  It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the …

  The Linux Kernel Organization linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jan 8, 2024
• Medium 4.7
  CVE-2022-28693

  Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized …

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Feb 14, 2025
• Unscored —
  CVE-2022-0494

  A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kern…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 25, 2022
• Unscored —
  CVE-2022-1353

  A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a lo…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 29, 2022
• Unscored —
  CVE-2022-23816 Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

  linux-hwe linux-azure linux-riscv linux-gcp Ubuntu Alpine
  Jan 21, 2022
• Unscored —
  CVE-2022-23825

  Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to i…

  AMD AMD Processors linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jul 14, 2022
• Unscored —
  CVE-2022-29900 Public exploit

  Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain mic…

  AMD AMD Processors linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jul 12, 2022
• Unscored —
  CVE-2022-49610

  KVM: VMX: Prevent RSB underflow before vmenter

  In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Prevent RSB underflow before vmenter On VMX, there are some balanced returns between the time the guest's SPEC_CTRL value is written, and the vmenter. Balanced returns (matched by a…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 26, 2025
• Unscored —
  CVE-2022-49611

  x86/speculation: Fill RSB on vmexit for IBRS

  In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attacks with RSB. While at it, add a bunch of comments to attempt to document the current state of tribal knowledg…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 26, 2025
• Unscored —
  CVE-2022-50053

  iavf: Fix reset error handling

  In the Linux kernel, the following vulnerability has been resolved: iavf: Fix reset error handling Do not call iavf_close in iavf_reset_task error handling. Doing so can lead to double call of napi_disable, which can lead to deadlock there. Removing VF would …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 18, 2025
• Unscored —
  CVE-2022-50054

  iavf: Fix NULL pointer dereference in iavf_get_link_ksettings

  In the Linux kernel, the following vulnerability has been resolved: iavf: Fix NULL pointer dereference in iavf_get_link_ksettings Fix possible NULL pointer dereference, due to freeing of adapter->vf_res in iavf_init_get_resources. Previous commit introduced a…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 18, 2025
• Unscored —
  CVE-2022-50055

  iavf: Fix adminq error handling

  In the Linux kernel, the following vulnerability has been resolved: iavf: Fix adminq error handling iavf_alloc_asq_bufs/iavf_alloc_arq_bufs allocates with dma_alloc_coherent memory for VF mailbox. Free DMA regions for both ASQ and ARQ in case error happens du…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 18, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2039448
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2066819
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090226
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2103148
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2103153
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2114849
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7110.json
• report
  https://access.redhat.com/security/cve/CVE-2022-0494
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-0494
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-0494
• article
  https://lore.kernel.org/all/20220216084038.15635-1-tcs.kernel@gmail.com/
• report
  https://access.redhat.com/security/cve/CVE-2022-1353
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1353
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1353
• article
  https://github.com/torvalds/linux/commit/9a564bccb78a76740ea9d75a259942df8143d02c
• report
  https://access.redhat.com/security/cve/CVE-2022-2588
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2588
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2588
• article
  https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2022-23816
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-23816
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-23816
• article
  https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037
• report
  https://access.redhat.com/security/cve/CVE-2022-23825
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-23825
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-23825
• report
  https://access.redhat.com/security/cve/CVE-2022-28693
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2107465
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-28693
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-28693
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00707.html
• report
  https://access.redhat.com/security/cve/CVE-2022-29900
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-29900
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-29900
• report
  https://access.redhat.com/security/cve/CVE-2022-29901
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-29901
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-29901
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00702.html