Important: kernel-rt security and bug fix update
Summary
ALSA-2023:1584: Important: kernel-rt security and bug fix update. Affects kernel-rt versions < 4.18.0-425.19.2.rt7.230.el8_7. Fixed in 4.18.0-425.19.2.rt7.230.el8_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Vulnerability Detail
This update addresses multiple security vulnerabilities:
- CVE-2022-4378: A stack overflow in do_proc_dointvec and proc_skip_spaces.
- CVE-2023-0266: A use-after-free vulnerability in ALSA pcm.
- CVE-2023-0386: A privilege escalation issue in FUSE filesystem.
- CVE-2022-4269: A CPU soft lockup in TC mirred egress-to-ingress action.
These vulnerabilities can lead to various security issues, including stack overflow, use-after-free, privilege escalation, and CPU soft lockup.
How To Fix
Minimum fixed version
4.18.0-425.19.2.rt7.230.el8_7
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
This update addresses multiple security vulnerabilities in the kernel-rt packages. It is recommended to update to the latest version to mitigate these vulnerabilities. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for kernel-rt →
FAQ
These vulnerabilities can be exploited by attackers to execute arbitrary code, escalate privileges, or cause denial-of-service conditions.
Updating to the latest kernel-rt packages is the recommended mitigation for these vulnerabilities.
There is no evidence of active exploits at the moment.
Yes, these vulnerabilities can be exploited remotely if the affected system is accessible over the network.
CVSS scores for these vulnerabilities are available on the respective CVE pages.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
