[RHSA-2023:0979] kernel-rt security and bug fix update

Severity Important

Affected Packages 12

CVEs 5

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)
kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)
kernel: use-after-free in __nfs42_ssc_open() in fs/nfs/nfs4file.c leading to remote Denial of Service attack (CVE-2022-4379)
kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan (CVE-2023-0179)
kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

kernel-rt: update RT source tree to the latest RHEL-9.1.z2 Batch (BZ#2160463)

Package	Affected Version
pkg:rpm/redhat/kernel-rt?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.18.1.rt21.181.el9_1
pkg:rpm/redhat/kernel-rt-modules?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.18.1.rt21.181.el9_1
pkg:rpm/redhat/kernel-rt-modules-extra?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.18.1.rt21.181.el9_1
pkg:rpm/redhat/kernel-rt-kvm?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.18.1.rt21.181.el9_1
pkg:rpm/redhat/kernel-rt-devel?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.18.1.rt21.181.el9_1
pkg:rpm/redhat/kernel-rt-debug?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.18.1.rt21.181.el9_1
pkg:rpm/redhat/kernel-rt-debug-modules?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.18.1.rt21.181.el9_1
pkg:rpm/redhat/kernel-rt-debug-modules-extra?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.18.1.rt21.181.el9_1
pkg:rpm/redhat/kernel-rt-debug-kvm?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.18.1.rt21.181.el9_1
pkg:rpm/redhat/kernel-rt-debug-devel?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.18.1.rt21.181.el9_1
pkg:rpm/redhat/kernel-rt-debug-core?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.18.1.rt21.181.el9_1
pkg:rpm/redhat/kernel-rt-core?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.18.1.rt21.181.el9_1

ID

RHSA-2023:0979

Severity

important

URL

https://access.redhat.com/errata/RHSA-2023:0979

Published

2023-02-28T00:00:00
(18 months ago)

Modified

2023-02-28T00:00:00
(18 months ago)

Rights

Other Advisories

Source	# ID	URL
Bugzilla	2119048	https://bugzilla.redhat.com/2119048
Bugzilla	2150999	https://bugzilla.redhat.com/2150999
Bugzilla	2152548	https://bugzilla.redhat.com/2152548
Bugzilla	2152807	https://bugzilla.redhat.com/2152807
Bugzilla	2161713	https://bugzilla.redhat.com/2161713
RHSA	RHSA-2023:0979	https://access.redhat.com/errata/RHSA-2023:0979
CVE	CVE-2022-2873	https://access.redhat.com/security/cve/CVE-2022-2873
CVE	CVE-2022-3564	https://access.redhat.com/security/cve/CVE-2022-3564
CVE	CVE-2022-4378	https://access.redhat.com/security/cve/CVE-2022-4378
CVE	CVE-2022-4379	https://access.redhat.com/security/cve/CVE-2022-4379
CVE	CVE-2023-0179	https://access.redhat.com/security/cve/CVE-2023-0179

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch
Affected	pkg:rpm/redhat/kernel-rt?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt	< 5.14.0-162.18.1.rt21.181.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-modules?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-modules	< 5.14.0-162.18.1.rt21.181.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-modules-extra?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-modules-extra	< 5.14.0-162.18.1.rt21.181.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-kvm?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-kvm	< 5.14.0-162.18.1.rt21.181.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-devel?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-devel	< 5.14.0-162.18.1.rt21.181.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-debug?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-debug	< 5.14.0-162.18.1.rt21.181.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-debug-modules?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-debug-modules	< 5.14.0-162.18.1.rt21.181.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-debug-modules-extra?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-debug-modules-extra	< 5.14.0-162.18.1.rt21.181.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-debug-kvm?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-debug-kvm	< 5.14.0-162.18.1.rt21.181.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-debug-devel?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-debug-devel	< 5.14.0-162.18.1.rt21.181.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-debug-core?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-debug-core	< 5.14.0-162.18.1.rt21.181.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-core?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-core	< 5.14.0-162.18.1.rt21.181.el9_1	redhat-9.1	x86_64

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date