Important: kernel-rt security and bug fix update
Summary
ALSA-2022:5267: Important: kernel-rt security and bug fix update. Affects kernel-rt versions < 5.14.0-70.17.1.rt21.89.el9_0. Fixed in 5.14.0-70.17.1.rt21.89.el9_0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. This vulnerability affects the AlmaLinux 9 ecosystem.
Vulnerability Detail
This vulnerability includes multiple security fixes:
- CVE-2022-1012: Small table perturb size in the TCP source port generation algorithm can lead to information leak.
- CVE-2022-1729: Race condition in perf_event_open leads to privilege escalation.
- CVE-2022-1966: Use-after-free write in the netfilter subsystem can lead to privilege escalation to root.
- CVE-2022-27666: Buffer overflow in IPsec ESP transformation code.
These vulnerabilities can have various impacts, including information leakage, privilege escalation, and potential root access.
How To Fix
Minimum fixed version
5.14.0-70.17.1.rt21.89.el9_0
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, it is crucial to update the kernel-rt package to address the identified vulnerabilities. Failure to do so may result in information leakage, privilege escalation, or potential root access. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for kernel-rt →
FAQ
These vulnerabilities can lead to information leakage, privilege escalation, and potential root access.
To fix these vulnerabilities, update the kernel-rt package to version 5.14.0-70.17.1.rt21.89.el9_0 or later.
No specific workarounds have been mentioned for these vulnerabilities.
You can find more information about these vulnerabilities in the CVE pages listed in the References section of the advisory.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by these vulnerabilities. Simply upload your manifest file (e.g., package-lock.json) and Vulert will provide real-time alerts for open-source vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
