Important: Kernel Security and Bug Fix Update for AlmaLinux 9
Summary
ALSA-2023:0951: Important: kernel security and bug fix update. Affects bpftool versions < 5.14.0-162.18.1.el9_1. Fixed in 5.14.0-162.18.1.el9_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of the AlmaLinux operating system. It provides essential functionality and interfaces for all other software and hardware components. The kernel is responsible for managing system resources, executing processes, and facilitating communication between software and hardware. Due to its critical role, vulnerabilities in the kernel can have severe consequences for system security and stability.
Vulnerability Detail
This update addresses multiple security vulnerabilities in the kernel:
-
CVE-2022-3564: A use-after-free vulnerability in the l2cap_reassemble_sdu() function of the net/bluetooth/l2cap_core.c file could allow an attacker to execute arbitrary code or cause a denial of service (DoS) condition.
-
CVE-2022-4378: A stack overflow vulnerability in the do_proc_dointvec() and proc_skip_spaces() functions could allow an attacker to execute arbitrary code or cause a DoS condition.
-
CVE-2022-4379: A use-after-free vulnerability in the __nfs42_ssc_open() function of the fs/nfs/nfs4file.c file could allow an attacker to cause a remote DoS attack.
-
CVE-2023-0179: An integer overflow vulnerability in the nft_payload_copy_vlan() function of the Netfilter framework could allow an attacker to bypass security restrictions or cause a DoS condition.
-
CVE-2022-2873: An out-of-bounds vulnerability in the i2c-ismt driver could allow an attacker to execute arbitrary code or cause a DoS condition.
These vulnerabilities could be exploited by remote attackers to gain unauthorized access, execute arbitrary code, or cause system instability.
How To Fix
Minimum fixed version
5.14.0-162.18.1.el9_1
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
This update addresses multiple security vulnerabilities in the kernel of AlmaLinux 9. It is recommended to update the kernel packages to the latest available version to mitigate the risks associated with these vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for bpftool →
FAQ
These vulnerabilities could allow remote attackers to gain unauthorized access, execute arbitrary code, or cause system instability.
The recommended mitigation is to update the kernel packages to the latest available version.
No specific workarounds have been provided for these vulnerabilities.
There are no known exploits for these vulnerabilities at the time of this advisory.
More information about these vulnerabilities can be found in the CVE pages listed in the References section of the original advisory.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
