Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 59

Vulnerabilities 16

• High 7.5
  CVE-2022-43945

  The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Nov 4, 2022
• Medium 5.6
  CVE-2022-29901

  Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)

  Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary…

  Intel Intel Microprocessors linux-raspi2 linux-hwe Debian Ubuntu
  Jul 12, 2022
• Medium 5.5
  CVE-2022-21123

  Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potenti…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022
• Medium 5.5
  CVE-2022-21125

  Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to po…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022
• Medium 5.5
  CVE-2022-21166

  Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticate…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022
• Medium 5.5
  CVE-2022-26373

  Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorize…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 18, 2022
• Medium 4.7
  CVE-2022-28693

  Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized …

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Feb 14, 2025
• Unscored —
  CVE-2022-1158

  A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get th…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Aug 5, 2022
• Unscored —
  CVE-2022-23816 Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

  linux-hwe linux-azure linux-riscv linux-gcp Ubuntu Alpine
  Jan 21, 2022
• Unscored —
  CVE-2022-23825

  Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to i…

  AMD AMD Processors linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jul 14, 2022
• Unscored —
  CVE-2022-2639 Public exploit

  An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, whi…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 1, 2022
• Unscored —
  CVE-2022-2959

  A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Aug 25, 2022
• Unscored —
  CVE-2022-29900 Public exploit

  Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain mic…

  AMD AMD Processors linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jul 12, 2022
• Unscored —
  CVE-2022-49086

  net: openvswitch: fix leak of nested actions

  In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix leak of nested actions While parsing user-provided actions, openvswitch module may dynamically allocate memory and store pointers in the internal copy of the actions. So…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 26, 2025
• Unscored —
  CVE-2022-49610

  KVM: VMX: Prevent RSB underflow before vmenter

  In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Prevent RSB underflow before vmenter On VMX, there are some balanced returns between the time the guest's SPEC_CTRL value is written, and the vmenter. Balanced returns (matched by a…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 26, 2025
• Unscored —
  CVE-2022-49611

  x86/speculation: Fill RSB on vmexit for IBRS

  In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attacks with RSB. While at it, add a bunch of comments to attempt to document the current state of tribal knowledg…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 26, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/solutions/6971358
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2069793
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2084479
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090226
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090237
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090240
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090241
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2103148
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2103153
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2103681
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2115065
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2141752
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8973.json
• report
  https://access.redhat.com/security/cve/CVE-2022-1158
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1158
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1158
• article
  https://www.openwall.com/lists/oss-security/2022/04/08/4
• report
  https://access.redhat.com/security/cve/CVE-2022-2639
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2639
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2639
• report
  https://access.redhat.com/security/cve/CVE-2022-2959
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2959
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2959
• article
  https://www.zerodayinitiative.com/advisories/ZDI-22-1165/
• report
  https://access.redhat.com/security/cve/CVE-2022-21123
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21123
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21123
• article
  https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/processor-mmio-stale-data-vulnerabilities.html
• report
  https://access.redhat.com/security/cve/CVE-2022-21125
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21125
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21125
• report
  https://access.redhat.com/security/cve/CVE-2022-21166
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21166
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21166
• report
  https://access.redhat.com/security/cve/CVE-2022-23816
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-23816
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-23816
• article
  https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037