Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 17

Vulnerabilities 7

• Medium 5.6
  CVE-2022-29901

  Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)

  Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary…

  Intel Intel Microprocessors linux-raspi2 linux-hwe Debian Ubuntu
  Jul 12, 2022
• Medium 5.5
  CVE-2022-26373

  Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorize…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 18, 2022
• Medium 5.3
  CVE-2022-2588 Public exploit

  It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the …

  The Linux Kernel Organization linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jan 8, 2024
• Medium 4.7
  CVE-2022-28693

  Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized …

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Feb 14, 2025
• Unscored —
  CVE-2022-23816 Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

  linux-hwe linux-azure linux-riscv linux-gcp Ubuntu Alpine
  Jan 21, 2022
• Unscored —
  CVE-2022-23825

  Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to i…

  AMD AMD Processors linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jul 14, 2022
• Unscored —
  CVE-2022-29900 Public exploit

  Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain mic…

  AMD AMD Processors linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jul 12, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/solutions/6971358
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090226
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2103148
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2103153
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2114849
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2115065
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7338.json
• report
  https://access.redhat.com/security/cve/CVE-2022-2588
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2588
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2588
• article
  https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2022-23816
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-23816
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-23816
• article
  https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037
• report
  https://access.redhat.com/security/cve/CVE-2022-23825
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-23825
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-23825
• report
  https://access.redhat.com/security/cve/CVE-2022-26373
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-26373
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-26373
• article
  https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/post-barrier-return-stack-buffer-predictions.html
• report
  https://access.redhat.com/security/cve/CVE-2022-28693
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2107465
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-28693
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-28693
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00707.html
• report
  https://access.redhat.com/security/cve/CVE-2022-29900
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-29900
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-29900
• report
  https://access.redhat.com/security/cve/CVE-2022-29901
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-29901
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-29901
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00702.html