Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 52

Vulnerabilities 6

• High 7.8
  CVE-2021-47099

  veth: ensure skb entering GRO are not cloned.

  In the Linux kernel, the following vulnerability has been resolved: veth: ensure skb entering GRO are not cloned. After commit d3256efd8e8b ("veth: allow enabling NAPI even without XDP"), if GRO is enabled on a veth device and TSO is disabled on the peer devi…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 4, 2024
• Medium 5.5
  CVE-2022-3640

  Linux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after free

  A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2cap_conn_del of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a pat…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Oct 21, 2022
• Medium 5.1
  CVE-2022-42895

  Info Leak in l2cap_core in the Linux Kernel

  There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely. We recommend upgrading past commit  https://github.com/torvalds/linux/commit/b1a2cd50c0357f…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Nov 23, 2022
• Unscored —
  CVE-2021-26341

  Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakag…

  AMD AMD Processors
  Mar 11, 2022
• Unscored —
  CVE-2022-1184

  A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. Th…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 29, 2022
• Unscored —
  CVE-2022-1852

  A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in th…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jun 30, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2061703
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2070205
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2089815
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2139610
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2147356
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2267919
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1877.json
• report
  https://access.redhat.com/security/cve/CVE-2021-26341
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-26341
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-26341
• article
  https://grsecurity.net/amd_branch_mispredictor_part_2_where_no_cpu_has_gone_before
• article
  https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1026
• article
  https://www.amd.com/system/files/documents/software-techniques-for-managing-speculation.pdf
• report
  https://access.redhat.com/security/cve/CVE-2021-47099
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-47099
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-47099
• article
  https://lore.kernel.org/linux-cve-announce/2024030415-CVE-2021-47099-3127@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-1184
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1184
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1184
• report
  https://access.redhat.com/security/cve/CVE-2022-1852
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1852
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1852
• article
  https://github.com/torvalds/linux/commit/fee060cd52d69c114b62d1a2948ea9648b5131f9
• report
  https://access.redhat.com/security/cve/CVE-2022-3640
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-3640
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-3640
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=42cf46dea905a80f6de218e837ba4d4cc33d6979
• report
  https://access.redhat.com/security/cve/CVE-2022-42895
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-42895
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-42895
• article
  https://github.com/google/security-research/security/advisories/GHSA-vccx-8h74-2357