Important: kernel-rt security and bug fix update
Summary
ALSA-2023:0979: Important: kernel-rt security and bug fix update. Affects kernel-rt versions < 5.14.0-162.18.1.rt21.181.el9_1. Fixed in 5.14.0-162.18.1.rt21.181.el9_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Vulnerability Detail
This update addresses multiple security vulnerabilities:
-
CVE-2022-3564: A use-after-free vulnerability in the l2cap_reassemble_sdu() function in net/bluetooth/l2cap_core.c could allow an attacker to execute arbitrary code or cause a denial of service.
-
CVE-2022-4378: A stack overflow vulnerability in the do_proc_dointvec and proc_skip_spaces functions could allow an attacker to execute arbitrary code or cause a denial of service.
-
CVE-2022-4379: A use-after-free vulnerability in the __nfs42_ssc_open() function in fs/nfs/nfs4file.c could allow an attacker to cause a remote denial of service.
-
CVE-2023-0179: An integer overflow vulnerability in the nft_payload_copy_vlan function in the Netfilter subsystem could allow an attacker to execute arbitrary code or cause a denial of service.
-
CVE-2022-2873: An out-of-bounds vulnerability in the i2c-ismt driver could allow an attacker to execute arbitrary code or cause a denial of service.
How To Fix
Minimum fixed version
5.14.0-162.18.1.rt21.181.el9_1
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
This update addresses multiple security vulnerabilities in the kernel-rt packages. It is recommended to update to the latest version to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for kernel-rt →
FAQ
These vulnerabilities could allow an attacker to execute arbitrary code or cause a denial of service.
No, there is no known workaround for these vulnerabilities.
CVSS scores for these vulnerabilities are available on the respective CVE pages.
These vulnerabilities were discovered by various researchers.
More information about these vulnerabilities can be found on the CVE pages listed in the References section.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
