Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 59

Vulnerabilities 4

• High 7.8
  CVE-2022-50095

  posix-cpu-timers: Cleanup CPU timers before freeing them during exec

  In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Cleanup CPU timers before freeing them during exec Commit 55e8c8eb2c7b ("posix-cpu-timers: Store a reference to a pid not a task") started looking up tasks by PID when delet…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 18, 2025
• Medium 5.3
  CVE-2022-2585

  It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed…

  The Linux Kernel Organization linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jan 8, 2024
• Unscored —
  CVE-2022-30594 Public exploit

  The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass in…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  May 12, 2022
• Unscored —
  CVE-2022-49281

  cifs: fix handlecache and multiuser

  In the Linux kernel, the following vulnerability has been resolved: cifs: fix handlecache and multiuser In multiuser each individual user has their own tcon structure for the share and thus their own handle for a cached directory. When we umount such a share …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 26, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2085300
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2114874
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7318.json
• report
  https://access.redhat.com/security/cve/CVE-2022-2585
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2585
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2585
• article
  https://lore.kernel.org/lkml/20220809170751.164716-1-cascardo@canonical.com/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2022-30594
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-30594
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-30594
• report
  https://access.redhat.com/security/cve/CVE-2022-49281
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2347860
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-49281
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-49281
• article
  https://lore.kernel.org/linux-cve-announce/2025022631-CVE-2022-49281-4365@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-50095
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2373693
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50095
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50095
• article
  https://lore.kernel.org/linux-cve-announce/2025061802-CVE-2022-50095-981c@gregkh/T