Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Vulnerabilities 13

• High 7.5
  CVE-2022-43945

  The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Nov 4, 2022
• Medium 5.6
  CVE-2022-29901

  Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)

  Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary…

  Intel Intel Microprocessors linux-raspi2 linux-hwe Debian Ubuntu
  Jul 12, 2022
• Medium 5.5
  CVE-2022-21123

  Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potenti…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022
• Medium 5.5
  CVE-2022-21125

  Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to po…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022
• Medium 5.5
  CVE-2022-21166

  Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticate…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Jun 15, 2022
• Medium 5.5
  CVE-2022-26373

  Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorize…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 18, 2022
• Medium 4.7
  CVE-2022-28693

  Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized …

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Feb 14, 2025
• Unscored —
  CVE-2022-1158

  A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get th…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Aug 5, 2022
• Unscored —
  CVE-2022-23816 Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

  linux-hwe linux-azure linux-riscv linux-gcp Ubuntu Alpine
  Jan 21, 2022
• Unscored —
  CVE-2022-23825

  Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to i…

  AMD AMD Processors linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jul 14, 2022
• Unscored —
  CVE-2022-2639 Public exploit

  An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, whi…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 1, 2022
• Unscored —
  CVE-2022-2959

  A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Aug 25, 2022
• Unscored —
  CVE-2022-29900 Public exploit

  Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain mic…

  AMD AMD Processors linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jul 12, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/solutions/6971358
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2069793
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2084479
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090226
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090237
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090240
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2090241
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2103148
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2103153
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2103681
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2115065
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2141752
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8974.json
• report
  https://access.redhat.com/security/cve/CVE-2022-1158
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1158
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1158
• article
  https://www.openwall.com/lists/oss-security/2022/04/08/4
• report
  https://access.redhat.com/security/cve/CVE-2022-2639
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2639
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2639
• report
  https://access.redhat.com/security/cve/CVE-2022-2959
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2959
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2959
• article
  https://www.zerodayinitiative.com/advisories/ZDI-22-1165/
• report
  https://access.redhat.com/security/cve/CVE-2022-21123
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21123
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21123
• article
  https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/processor-mmio-stale-data-vulnerabilities.html
• report
  https://access.redhat.com/security/cve/CVE-2022-21125
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21125
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21125
• report
  https://access.redhat.com/security/cve/CVE-2022-21166
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21166
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21166
• report
  https://access.redhat.com/security/cve/CVE-2022-23816
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-23816
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-23816
• article
  https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037