ALSA-2023:0300 - Important: kernel-rt security and bug fix update
Summary
ALSA-2023:0300: Important: kernel-rt security and bug fix update. Affects kernel-rt versions < 5.14.0-162.12.1.rt21.175.el9_1. Fixed in 5.14.0-162.12.1.rt21.175.el9_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. This vulnerability affects the AlmaLinux 9 ecosystem.
Vulnerability Detail
This vulnerability includes multiple security fixes:
- CVE-2022-2959: A watch queue race condition can lead to privilege escalation.
- CVE-2022-2964: Memory corruption in AX88179_178A based USB ethernet device.
- CVE-2022-4139: Incorrect GPU TLB flush in i915 can lead to random memory access.
- CVE-2022-43945: Buffer overflow in nfsd by RPC message over TCP with garbage data.
- CVE-2022-3077: Unbounded length in i2c leads to buffer overflow in ismt_access().
- CVE-2022-30594: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option.
These vulnerabilities can result in privilege escalation, memory corruption, random memory access, buffer overflow, and unauthorized access to system resources.
How To Fix
Minimum fixed version
5.14.0-162.12.1.rt21.175.el9_1
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no mentioned workarounds for this vulnerability.
Conclusion
The kernel-rt package in the AlmaLinux 9 ecosystem is affected by multiple vulnerabilities. To mitigate these vulnerabilities, it is recommended to update the package to the latest version. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for kernel-rt →
FAQ
These vulnerabilities can lead to privilege escalation, memory corruption, random memory access, buffer overflow, and unauthorized access to system resources.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability.
There are no known exploits for these vulnerabilities at the moment.
Yes, a patch is available. Update the kernel-rt package to version 5.14.0-162.12.1.rt21.175.el9_1 or later.
You can find more information about these vulnerabilities in the CVE pages listed in the References section of the vulnerability report.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
