Important: kernel-rt security and bug fix update
Summary
ALSA-2023:1691: Important: kernel-rt security and bug fix update. Affects kernel-rt versions < 5.14.0-162.23.1.rt21.186.el9_1. Fixed in 5.14.0-162.23.1.rt21.186.el9_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Vulnerability Detail
A vulnerability has been identified in the kernel-rt package that allows low-privileged users to escalate their privileges in the FUSE filesystem. This vulnerability is tracked as CVE-2023-0386. It could potentially lead to unauthorized access and control of the affected system.
How To Fix
Minimum fixed version
5.14.0-162.23.1.rt21.186.el9_1
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
It is crucial to update the kernel-rt package to the fixed version to mitigate the privilege escalation vulnerability. Failure to do so may result in unauthorized access and control of the affected system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for kernel-rt →
FAQ
The vulnerability allows low-privileged users to escalate their privileges, potentially leading to unauthorized access and control of the affected system.
You can check if your system is affected by this vulnerability by comparing the installed version of the kernel-rt package with the fixed version mentioned in the advisory.
At the time of this advisory, there are no known exploits for this vulnerability. However, it is recommended to apply the security update as soon as possible to prevent any potential exploitation.
No specific workaround has been provided for this vulnerability. It is recommended to update the kernel-rt package to the fixed version.
You can find more information about this vulnerability, including the impact, CVSS score, and related details, on the CVE page listed in the References section of the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
