[RHSA-2023:1469] kernel-rt security and bug fix update

Severity Important

Affected Packages 12

CVEs 3

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744)
ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266)
kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

kernel-rt: update RT source tree to the latest RHEL-9.1.z3 Batch (BZ#2170460)

Package	Affected Version
pkg:rpm/redhat/kernel-rt?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.22.2.rt21.186.el9_1
pkg:rpm/redhat/kernel-rt-modules?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.22.2.rt21.186.el9_1
pkg:rpm/redhat/kernel-rt-modules-extra?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.22.2.rt21.186.el9_1
pkg:rpm/redhat/kernel-rt-kvm?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.22.2.rt21.186.el9_1
pkg:rpm/redhat/kernel-rt-devel?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.22.2.rt21.186.el9_1
pkg:rpm/redhat/kernel-rt-debug?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.22.2.rt21.186.el9_1
pkg:rpm/redhat/kernel-rt-debug-modules?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.22.2.rt21.186.el9_1
pkg:rpm/redhat/kernel-rt-debug-modules-extra?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.22.2.rt21.186.el9_1
pkg:rpm/redhat/kernel-rt-debug-kvm?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.22.2.rt21.186.el9_1
pkg:rpm/redhat/kernel-rt-debug-devel?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.22.2.rt21.186.el9_1
pkg:rpm/redhat/kernel-rt-debug-core?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.22.2.rt21.186.el9_1
pkg:rpm/redhat/kernel-rt-core?arch=x86_64&distro=redhat-9.1	< 5.14.0-162.22.2.rt21.186.el9_1

ID

RHSA-2023:1469

Severity

important

URL

https://access.redhat.com/errata/RHSA-2023:1469

Published

2023-03-27T00:00:00
(17 months ago)

Modified

2023-03-27T00:00:00
(17 months ago)

Rights

Other Advisories

Source	# ID	URL
Bugzilla	2150272	https://bugzilla.redhat.com/2150272
Bugzilla	2156322	https://bugzilla.redhat.com/2156322
Bugzilla	2163379	https://bugzilla.redhat.com/2163379
RHSA	RHSA-2023:1469	https://access.redhat.com/errata/RHSA-2023:1469
CVE	CVE-2022-4269	https://access.redhat.com/security/cve/CVE-2022-4269
CVE	CVE-2022-4744	https://access.redhat.com/security/cve/CVE-2022-4744
CVE	CVE-2023-0266	https://access.redhat.com/security/cve/CVE-2023-0266

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch
Affected	pkg:rpm/redhat/kernel-rt?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt	< 5.14.0-162.22.2.rt21.186.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-modules?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-modules	< 5.14.0-162.22.2.rt21.186.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-modules-extra?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-modules-extra	< 5.14.0-162.22.2.rt21.186.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-kvm?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-kvm	< 5.14.0-162.22.2.rt21.186.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-devel?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-devel	< 5.14.0-162.22.2.rt21.186.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-debug?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-debug	< 5.14.0-162.22.2.rt21.186.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-debug-modules?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-debug-modules	< 5.14.0-162.22.2.rt21.186.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-debug-modules-extra?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-debug-modules-extra	< 5.14.0-162.22.2.rt21.186.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-debug-kvm?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-debug-kvm	< 5.14.0-162.22.2.rt21.186.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-debug-devel?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-debug-devel	< 5.14.0-162.22.2.rt21.186.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-debug-core?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-debug-core	< 5.14.0-162.22.2.rt21.186.el9_1	redhat-9.1	x86_64
Affected	pkg:rpm/redhat/kernel-rt-core?arch=x86_64&distro=redhat-9.1	redhat	kernel-rt-core	< 5.14.0-162.22.2.rt21.186.el9_1	redhat-9.1	x86_64

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date