Headline

RHSA-2022:0822: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-0847: kernel: improper initialization of the “flags” member of the new pipe_buffer

3 years ago

Red Hat Security Data

Open in Source

#vulnerability #web #linux #red_hat #nodejs #js #java #kubernetes

Skip to navigation Skip to main content

Utilities

Subscriptions
Downloads
Containers
Support Cases

Red Hat Customer Portal

Infrastructure and Management

Red Hat Enterprise Linux
Red Hat Virtualization
Red Hat Identity Management
Red Hat Directory Server
Red Hat Certificate System
Red Hat Satellite
Red Hat Subscription Management
Red Hat Update Infrastructure
Red Hat Insights
Red Hat Ansible Automation Platform

Cloud Computing

Red Hat OpenShift
Red Hat CloudForms
Red Hat OpenStack Platform
Red Hat OpenShift Container Platform
Red Hat OpenShift Data Science
Red Hat OpenShift Online
Red Hat OpenShift Dedicated
Red Hat Advanced Cluster Security for Kubernetes
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Quay
Red Hat CodeReady Workspaces
Red Hat OpenShift Service on AWS

Storage

Red Hat Gluster Storage
Red Hat Hyperconverged Infrastructure
Red Hat Ceph Storage
Red Hat OpenShift Data Foundation

Runtimes

Red Hat Runtimes
Red Hat JBoss Enterprise Application Platform
Red Hat Data Grid
Red Hat JBoss Web Server
Red Hat Single Sign On
Red Hat support for Spring Boot
Red Hat build of Node.js
Red Hat build of Thorntail
Red Hat build of Eclipse Vert.x
Red Hat build of OpenJDK
Red Hat build of Quarkus
Red Hat CodeReady Studio

Integration and Automation

Red Hat Process Automation
Red Hat Process Automation Manager
Red Hat Decision Manager

All Products

Issued:

2022-03-10

Updated:

2022-03-10

RHSA-2022:0822 - Security Advisory

Overview
Updated Packages

Synopsis

Important: kernel-rt security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: improper initialization of the “flags” member of the new pipe_buffer (CVE-2022-0847)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

Red Hat Enterprise Linux for Real Time - Telecommunications Update Service 8.4 x86_64
Red Hat Enterprise Linux for Real Time for NFV - Telecommunications Update Service 8.4 x86_64

Fixes

BZ - 2060795 - CVE-2022-0847 kernel: improper initialization of the “flags” member of the new pipe_buffer

References

https://access.redhat.com/security/updates/classification/#important
https://access.redhat.com/security/vulnerabilities/RHSB-2022-002

Red Hat Enterprise Linux for Real Time - Telecommunications Update Service 8.4

SRPM

kernel-rt-4.18.0-305.40.2.rt7.113.el8_4.src.rpm

SHA-256: 01a2e780adb05deb86c25ac253d0108495f47d1623f5971ef34f136bda7f1b9a

x86_64

kernel-rt-4.18.0-305.40.2.rt7.113.el8_4.x86_64.rpm

SHA-256: 5de3d1416e17b5cffe5c78be633848c04664474cfbe5b1f17bf34b9946196d28

kernel-rt-core-4.18.0-305.40.2.rt7.113.el8_4.x86_64.rpm

SHA-256: 2e295a82521ec4bb1270f6aa81cdf4450402b9d93614b51db72b7c5eeb0509bc

kernel-rt-debug-4.18.0-305.40.2.rt7.113.el8_4.x86_64.rpm

SHA-256: 886fbfb8d6b8d881a103cb1f5b3a2282d8b3db672d1f44dddc90eb9fbbc5bb70

kernel-rt-debug-core-4.18.0-305.40.2.rt7.113.el8_4.x86_64.rpm

SHA-256: 3f3cf43b68c4106c5763a7f4ba8e7da1ad85be3e12906627dc563d11fb457689

kernel-rt-debug-debuginfo-4.18.0-305.40.2.rt7.113.el8_4.x86_64.rpm

SHA-256: a11a6121431079332d755556c471846a1fd5341c2be81324d8da0eebc54bfbab

kernel-rt-debug-devel-4.18.0-305.40.2.rt7.113.el8_4.x86_64.rpm

SHA-256: 87062a330216d4f7c3848f34d47524558a392c16025706343c2cdd4baeecf984

kernel-rt-debug-modules-4.18.0-305.40.2.rt7.113.el8_4.x86_64.rpm

SHA-256: cc0b8121b8afc249a28ff204ccca7f5b81eec539a30455fd64d05d0569d83f4e

kernel-rt-debug-modules-extra-4.18.0-305.40.2.rt7.113.el8_4.x86_64.rpm

SHA-256: 2cc995ad0591ddf806e25ac74b90752a49a49be3c3c7977e303a6d4fc77c0d81

kernel-rt-debuginfo-4.18.0-305.40.2.rt7.113.el8_4.x86_64.rpm

SHA-256: 0fe5faf224350822e588e9c8e9a5c643923477edef190b36706a5f47c8c65f5c

kernel-rt-debuginfo-common-x86_64-4.18.0-305.40.2.rt7.113.el8_4.x86_64.rpm

SHA-256: e7e5b8d86713e2be1f8b0ea996f0e4112bba00263fcab42f3dbc08e9e6082db7

kernel-rt-devel-4.18.0-305.40.2.rt7.113.el8_4.x86_64.rpm

SHA-256: 266162e750c2105f293a38c0a41b24a7cba66aa6438ad072bdb37f7469b3585f

kernel-rt-modules-4.18.0-305.40.2.rt7.113.el8_4.x86_64.rpm

SHA-256: 2a3a397a81ece9f0d135eb7f61f4e93d51a6f494f28ab711071022f08be6a449

kernel-rt-modules-extra-4.18.0-305.40.2.rt7.113.el8_4.x86_64.rpm

SHA-256: f456cbb72c510c6cca1d131be0500fe7b7c8b8b9c19ad32d27f2a760008f95c1

Red Hat Enterprise Linux for Real Time for NFV - Telecommunications Update Service 8.4