Important: kernel-rt security and bug fix update
Summary
ALSA-2023:1469: Important: kernel-rt security and bug fix update. Affects kernel-rt versions < 5.14.0-162.22.2.rt21.186.el9_1. Fixed in 5.14.0-162.22.2.rt21.186.el9_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Vulnerability Detail
The vulnerability (CVE-2023-0266) in the ALSA pcm component allows an unprivileged local attacker to trigger a use-after-free (UAF) condition by exploiting a race condition in the snd_ctl_elem_read function. This could lead to privilege escalation or denial of service attacks. Another vulnerability (CVE-2022-4744) in the kernel's tun driver allows a local attacker to trigger a double free vulnerability, potentially leading to arbitrary code execution. Additionally, a CPU soft lockup vulnerability (CVE-2022-4269) in the kernel's TC mirred egress-to-ingress action can cause a denial of service condition.
How To Fix
Minimum fixed version
5.14.0-162.22.2.rt21.186.el9_1
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
It is important to update the kernel-rt packages to address these security vulnerabilities. Failure to do so may expose systems to potential privilege escalation, denial of service, or arbitrary code execution attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for kernel-rt →
FAQ
The ALSA pcm vulnerability (CVE-2023-0266) can lead to privilege escalation or denial of service attacks. The kernel tun driver vulnerability (CVE-2022-4744) can potentially allow arbitrary code execution. The CPU soft lockup vulnerability (CVE-2022-4269) can cause a denial of service condition.
Users of the kernel-rt packages on AlmaLinux 9 are affected by these vulnerabilities.
No known workarounds are available for these vulnerabilities. It is recommended to update to the latest kernel-rt packages.
There is no evidence of active exploitation of these vulnerabilities at the moment.
More information about these vulnerabilities can be found in the CVE pages listed in the References section of the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
