Moderate: kernel-rt security and bug fix update
Summary
ALSA-2022:7444: Moderate: kernel-rt security and bug fix update. Affects kernel-rt versions < 4.18.0-425.3.1.rt7.213.el8. Fixed in 4.18.0-425.3.1.rt7.213.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. This vulnerability affects the AlmaLinux 8 ecosystem.
Vulnerability Detail
This vulnerability allows an off-path attacker to inject data or terminate a victim's TCP session. It also includes race conditions, use-after-free vulnerabilities, memory leaks, NULL pointer dereferences, information leaks, buffer overflows, and other memory-related errors. These vulnerabilities can lead to various consequences such as data manipulation, denial of service, privilege escalation, and potential code execution.
How To Fix
Minimum fixed version
4.18.0-425.3.1.rt7.213.el8
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no specific workarounds mentioned for this vulnerability.
Conclusion
In conclusion, this vulnerability in the kernel-rt packages can lead to various security issues and should be addressed by updating the affected packages. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for kernel-rt →
FAQ
This vulnerability can allow an attacker to manipulate data, terminate TCP sessions, cause denial of service, escalate privileges, and potentially execute arbitrary code.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for vulnerabilities.
There are no known exploits available for this vulnerability at the moment.
For more details about the security issue(s), including the impact, CVSS score, acknowledgments, and related information, refer to the CVE page(s) listed in the References section.
You can find more detailed information on changes in this release by referring to the AlmaLinux Release Notes linked in the References section.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
