Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 52

Vulnerabilities 14

• High 8.6
  CVE-2022-1055

  Use after Free in tc_new_tfilter allowing for privilege escalation in Linux Kernel

  A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Mar 29, 2022
• High 8.1
  CVE-2022-41674

  An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer o…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux Alpine
  Oct 13, 2022
• High 7.8
  CVE-2022-42720

  Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux Alpine
  Oct 13, 2022
• High 7.1
  CVE-2023-6606

  Kernel: out-of-bounds read vulnerability in smbcalcsize

  An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Dec 8, 2023
• High 7.0
  CVE-2023-51043

  In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a n…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jan 23, 2024
• Medium 6.8
  CVE-2024-0565

  Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client

  An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.

  Linux Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Jan 15, 2024
• Medium 5.5
  CVE-2022-42721

  A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux Alpine
  Oct 13, 2022
• Medium 5.5
  CVE-2022-45869

  A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial o…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Nov 30, 2022
• Medium 5.5
  CVE-2023-0597

  A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Feb 23, 2023
• Medium 5.5
  CVE-2023-7192

  Kernel: refcount leak in ctnetlink_create_conntrack()

  A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jan 2, 2024
• Unscored —
  CVE-2021-43975

  In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_ut…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Nov 17, 2021
• Unscored —
  CVE-2022-27950

  In drivers/hid/hid-elo.c in the Linux kernel before 5.16.11, a memory leak exists for a certain hid_parse error conditi…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 28, 2022
• Unscored —
  CVE-2022-2938

  A flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the feature is disabled by d…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Aug 23, 2022
• Unscored —
  CVE-2022-42722

  In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 sta…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux Alpine
  Oct 13, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2024989
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2069408
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2070220
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2120175
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2134377
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2134451
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2134506
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2134517
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151317
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2165926
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2253611
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2256279
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2258518
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2260005
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1188.json
• report
  https://access.redhat.com/security/cve/CVE-2021-43975
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-43975
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-43975
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=b922f622592af76b57cbc566eaeccda0b31a3496
• report
  https://access.redhat.com/security/cve/CVE-2022-1055
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1055
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1055
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
• article
  https://syzkaller.appspot.com/bug?id=2212474c958978ab86525fe6832ac8102c309ffc
• report
  https://access.redhat.com/security/cve/CVE-2022-2938
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2938
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2938
• report
  https://access.redhat.com/security/cve/CVE-2022-27950
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-27950
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-27950
• article
  https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=817b8b9c5396d2b2d92311b46719aad5d3339dbe
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fbf42729d0e91332e8ce75a1ecce08b8a2dab9c1
• article
  https://www.openwall.com/lists/oss-security/2022/03/13/1
• report
  https://access.redhat.com/security/cve/CVE-2022-41674
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-41674
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-41674
• article
  https://www.openwall.com/lists/oss-security/2022/10/13/2
• report
  https://access.redhat.com/security/cve/CVE-2022-42720