Moderate: kernel-rt security and bug fix update
Summary
ALSA-2022:6437: Moderate: kernel-rt security and bug fix update. Affects kernel-rt versions < 4.18.0-372.26.1.rt7.183.el8_6. Fixed in 4.18.0-372.26.1.rt7.183.el8_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. It is used in AlmaLinux 8 ecosystem.
Vulnerability Detail
This vulnerability includes three security fixes:
- Incomplete cleanup of multi-core shared buffers (aka SBDR) (CVE-2022-21123)
- Incomplete cleanup of microarchitectural fill buffers (aka SBDS) (CVE-2022-21125)
- Incomplete cleanup in specific special register write operations (aka DRPW) (CVE-2022-21166)
These vulnerabilities can potentially lead to security breaches and unauthorized access to sensitive information.
How To Fix
Minimum fixed version
4.18.0-372.26.1.rt7.183.el8_6
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no mentioned workarounds for this vulnerability.
Conclusion
In conclusion, it is important to update the kernel-rt package to the latest version to mitigate the security risks associated with these vulnerabilities. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for kernel-rt →
FAQ
These vulnerabilities can potentially lead to security breaches and unauthorized access to sensitive information.
You can use Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability.
Yes, a patch is available. It is recommended to update the kernel-rt package to version 4.18.0-372.26.1.rt7.183.el8_6 or later.
There are no known exploits for these vulnerabilities at the moment.
You can refer to the CVE pages listed in the References section of the vulnerability details for more information.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
