Important: kernel-rt security and bug fix update
Summary
ALSA-2022:7319: Important: kernel-rt security and bug fix update. Affects kernel-rt versions < 5.14.0-70.30.1.rt21.102.el9_0. Fixed in 5.14.0-70.30.1.rt21.102.el9_0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. This vulnerability affects the AlmaLinux 9 ecosystem.
Vulnerability Detail
This vulnerability includes two security fixes:
- Posix cpu timer use-after-free may lead to local privilege escalation (CVE-2022-2585)
- Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)
These vulnerabilities can potentially allow local attackers to escalate their privileges or bypass security restrictions.
How To Fix
Minimum fixed version
5.14.0-70.30.1.rt21.102.el9_0
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
To mitigate these vulnerabilities, it is crucial to update the kernel-rt package to the recommended version. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for kernel-rt →
FAQ
These vulnerabilities can allow local attackers to escalate their privileges or bypass security restrictions.
To fix these vulnerabilities, update the kernel-rt package to version 5.14.0-70.30.1.rt21.102.el9_0 or later.
No specific workarounds have been mentioned for these vulnerabilities.
All versions prior to 5.14.0-70.30.1.rt21.102.el9_0 are affected.
You can find more information about these vulnerabilities in the CVE pages listed in the References section of the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
