—–BEGIN PGP SIGNED MESSAGE—–
\nHash: SHA256<\/p>\n
=====================================================================
\nRed Hat Security Advisory<\/p>\n
Synopsis: Important: kernel security and bug fix update
\nAdvisory ID: RHSA-2022:8685-01
\nProduct: Red Hat Enterprise Linux
\nAdvisory URL: https:\/\/access.redhat.com\/errata\/RHSA-2022:8685
\nIssue date: 2022-11-29
\nCVE Names: CVE-2022-1158
\n=====================================================================<\/p>\n
1. Summary:<\/p>\n
An update for kernel is now available for Red Hat Enterprise Linux 8.4
\nExtended Update Support.<\/p>\n
Red Hat Product Security has rated this update as having a security impact
\nof Important. A Common Vulnerability Scoring System (CVSS) base score,
\nwhich gives a detailed severity rating, is available for each vulnerability
\nfrom the CVE link(s) in the References section.<\/p>\n
2. Relevant releases\/architectures:<\/p>\n
Red Hat CodeReady Linux Builder EUS (v. 8.4) – aarch64, ppc64le, x86_64
\nRed Hat Enterprise Linux BaseOS EUS (v.8.4) – aarch64, noarch, ppc64le, s390x, x86_64<\/p>\n
3. Description:<\/p>\n
The kernel packages contain the Linux kernel, the core of any Linux
\noperating system.<\/p>\n
Security Fix(es):<\/p>\n
* KVM: cmpxchg_gpte can write to pfns outside the userspace region
\n(CVE-2022-1158)<\/p>\n
For more details about the security issue(s), including the impact, a CVSS
\nscore, acknowledgments, and other related information, refer to the CVE
\npage(s) listed in the References section.<\/p>\n
Bug Fix(es):<\/p>\n
* E810-XXV – Multicast packets are not received by all VFs on the same port
\neven though they have the same VLAN (BZ#2117027)<\/p>\n
* kernel BUG at kernel\/sched\/deadline.c:1561! [rhel-8.4.0] (BZ#2125673)<\/p>\n
* zfcp: fix missing auto port scan and thus missing target ports
\n(BZ#2127851)<\/p>\n
* memory leak in vxlan_xmit_one (BZ#2131256)<\/p>\n
* nf_conntrack causing nfs to stall (BZ#2134090)<\/p>\n
* s390x: bpftrace Could not read symbols from
\n\/sys\/kernel\/debug\/tracing\/available_filter_functions: No such device
\n(BZ#2134809)<\/p>\n
* Intel E810 PTP clock glitching (BZ#2136038)<\/p>\n
* configure link-down-on-close on and change interface mtu to 9000,the
\ninterface can’t up (BZ#2136218)<\/p>\n
* dump additional CSRs for Tx hang debugging (BZ#2136515)<\/p>\n
* system panic during sriov sriov_test_cntvf_reboot testing (BZ#2137272)<\/p>\n
* arp replies not making it to switch (BZ#2137521)<\/p>\n
* WARNING: CPU: 0 PID: 9637 at kernel\/time\/hrtimer.c:1309
\nhrtimer_start_range_ns+0x35d\/0x400 (BZ#2138956)<\/p>\n
* Cannot trigger kernel dump using NMI on SNO node running PAO and RT
\nkernel (BZ#2139582)<\/p>\n
4. Solution:<\/p>\n
For details on how to apply this update, which includes the changes
\ndescribed in this advisory, refer to:<\/p>\n
https:\/\/access.redhat.com\/articles\/11258<\/p>\n
The system must be rebooted for this update to take effect.<\/p>\n
5. Bugs fixed (https:\/\/bugzilla.redhat.com\/):<\/p>\n
2069793 – CVE-2022-1158 kernel: KVM: cmpxchg_gpte can write to pfns outside the userspace region<\/p>\n
6. Package List:<\/p>\n
Red Hat Enterprise Linux BaseOS EUS (v.8.4):<\/p>\n
Source:
\nkernel-4.18.0-305.71.1.el8_4.src.rpm<\/p>\n
aarch64:
\nbpftool-4.18.0-305.71.1.el8_4.aarch64.rpm
\nbpftool-debuginfo-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-core-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-cross-headers-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-debug-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-debug-core-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-debug-debuginfo-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-debug-devel-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-debug-modules-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-debug-modules-extra-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-debuginfo-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-debuginfo-common-aarch64-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-devel-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-headers-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-modules-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-modules-extra-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-tools-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-tools-debuginfo-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-tools-libs-4.18.0-305.71.1.el8_4.aarch64.rpm
\nperf-4.18.0-305.71.1.el8_4.aarch64.rpm
\nperf-debuginfo-4.18.0-305.71.1.el8_4.aarch64.rpm
\npython3-perf-4.18.0-305.71.1.el8_4.aarch64.rpm
\npython3-perf-debuginfo-4.18.0-305.71.1.el8_4.aarch64.rpm<\/p>\n
noarch:
\nkernel-abi-stablelists-4.18.0-305.71.1.el8_4.noarch.rpm
\nkernel-doc-4.18.0-305.71.1.el8_4.noarch.rpm<\/p>\n
ppc64le:
\nbpftool-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nbpftool-debuginfo-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-core-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-cross-headers-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-debug-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-debug-core-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-debug-debuginfo-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-debug-devel-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-debug-modules-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-debug-modules-extra-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-debuginfo-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-debuginfo-common-ppc64le-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-devel-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-headers-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-modules-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-modules-extra-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-tools-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-tools-debuginfo-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-tools-libs-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nperf-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nperf-debuginfo-4.18.0-305.71.1.el8_4.ppc64le.rpm
\npython3-perf-4.18.0-305.71.1.el8_4.ppc64le.rpm
\npython3-perf-debuginfo-4.18.0-305.71.1.el8_4.ppc64le.rpm<\/p>\n
s390x:
\nbpftool-4.18.0-305.71.1.el8_4.s390x.rpm
\nbpftool-debuginfo-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-core-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-cross-headers-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-debug-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-debug-core-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-debug-debuginfo-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-debug-devel-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-debug-modules-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-debug-modules-extra-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-debuginfo-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-debuginfo-common-s390x-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-devel-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-headers-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-modules-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-modules-extra-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-tools-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-tools-debuginfo-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-zfcpdump-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-zfcpdump-core-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-zfcpdump-debuginfo-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-zfcpdump-devel-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-zfcpdump-modules-4.18.0-305.71.1.el8_4.s390x.rpm
\nkernel-zfcpdump-modules-extra-4.18.0-305.71.1.el8_4.s390x.rpm
\nperf-4.18.0-305.71.1.el8_4.s390x.rpm
\nperf-debuginfo-4.18.0-305.71.1.el8_4.s390x.rpm
\npython3-perf-4.18.0-305.71.1.el8_4.s390x.rpm
\npython3-perf-debuginfo-4.18.0-305.71.1.el8_4.s390x.rpm<\/p>\n
x86_64:
\nbpftool-4.18.0-305.71.1.el8_4.x86_64.rpm
\nbpftool-debuginfo-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-core-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-cross-headers-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-debug-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-debug-core-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-debug-debuginfo-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-debug-devel-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-debug-modules-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-debug-modules-extra-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-debuginfo-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-debuginfo-common-x86_64-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-devel-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-headers-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-modules-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-modules-extra-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-tools-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-tools-debuginfo-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-tools-libs-4.18.0-305.71.1.el8_4.x86_64.rpm
\nperf-4.18.0-305.71.1.el8_4.x86_64.rpm
\nperf-debuginfo-4.18.0-305.71.1.el8_4.x86_64.rpm
\npython3-perf-4.18.0-305.71.1.el8_4.x86_64.rpm
\npython3-perf-debuginfo-4.18.0-305.71.1.el8_4.x86_64.rpm<\/p>\n
Red Hat CodeReady Linux Builder EUS (v. 8.4):<\/p>\n
aarch64:
\nbpftool-debuginfo-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-debug-debuginfo-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-debuginfo-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-debuginfo-common-aarch64-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-tools-debuginfo-4.18.0-305.71.1.el8_4.aarch64.rpm
\nkernel-tools-libs-devel-4.18.0-305.71.1.el8_4.aarch64.rpm
\nperf-debuginfo-4.18.0-305.71.1.el8_4.aarch64.rpm
\npython3-perf-debuginfo-4.18.0-305.71.1.el8_4.aarch64.rpm<\/p>\n
ppc64le:
\nbpftool-debuginfo-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-debug-debuginfo-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-debuginfo-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-debuginfo-common-ppc64le-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-tools-debuginfo-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nkernel-tools-libs-devel-4.18.0-305.71.1.el8_4.ppc64le.rpm
\nperf-debuginfo-4.18.0-305.71.1.el8_4.ppc64le.rpm
\npython3-perf-debuginfo-4.18.0-305.71.1.el8_4.ppc64le.rpm<\/p>\n
x86_64:
\nbpftool-debuginfo-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-debug-debuginfo-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-debuginfo-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-debuginfo-common-x86_64-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-tools-debuginfo-4.18.0-305.71.1.el8_4.x86_64.rpm
\nkernel-tools-libs-devel-4.18.0-305.71.1.el8_4.x86_64.rpm
\nperf-debuginfo-4.18.0-305.71.1.el8_4.x86_64.rpm
\npython3-perf-debuginfo-4.18.0-305.71.1.el8_4.x86_64.rpm<\/p>\n
These packages are GPG signed by Red Hat for security. Our key and
\ndetails on how to verify the signature are available from
\nhttps:\/\/access.redhat.com\/security\/team\/key\/<\/p>\n
7. References:<\/p>\n
https:\/\/access.redhat.com\/security\/cve\/CVE-2022-1158
\nhttps:\/\/access.redhat.com\/security\/updates\/classification\/#important<\/p>\n
8. Contact:<\/p>\n
The Red Hat security contact is <secalert@redhat.com>. More contact
\ndetails at https:\/\/access.redhat.com\/security\/team\/contact\/<\/p>\n
Copyright 2022 Red Hat, Inc.
\n—–BEGIN PGP SIGNATURE—–
\nVersion: GnuPG v1<\/p>\n
iQIVAwUBY4ZVptzjgjWX9erEAQiCGg\/+IF7xgD9A\/HMCrjo\/vs9vQpxHxIJ0ZZxo
\nee6o48mcxHWA+E93bIswJMHckqGXfSeVi2crv6EiN2Cs26I4refmKPVsPbTKCH+0
\n8M+aVuXaJlSUIIfhMEH9TjDonAVE+KiVOkOXf8Oc0gYqYDEXt7mnoZQYrdjU0fz5
\nt7uskFWgcxYqa+eIcQwtKJzILokcypmV6SfFILGMFXdJgluSFb\/eLG4dt6sLjJFk
\nb0d52IX+yQP8YcApnvXvwLtZXqrErWBWC3Rueygven\/DVlG5b74bVffgjh2z6dJR
\nU0ijVBL+qZBdYhFxDAkHB8fRIl7A0BBvfVnuT3piDLFXx8ypuqW+r9bGTqmuDc7O
\nWRqft3Z\/hvi1oSpDGDIcSKSbH\/9VCqGdRveWa30U5AJtF2LJoQuL5ePjlu9f0dNg
\nu\/2YB+bgcdtx23U0lBaWbPwTFkmV5VtZYSRwszMrTupGeP17LrMhGI0Y1A4TCNHt
\nQaK8EUyqNndmK44hJwuqAtWSeplnhVxz5GVphrqslvUNeSkR3M37OMLlObu5Qqa0
\npBkS\/TubfVH2dfk4pKAqfVY27hbO97YeMyIQ++NfdKcyOiTdBxX1g6yN7uun9nKW
\nyDIaVo5oGgBQU+q6nQyRQtM\/d6NFpZmm0gH0O7beGhdIKnmthzbtuQ7yzaWPtIVQ
\nJbq89idXCcg=
\n=lmf0
\n—–END PGP SIGNATURE—–
\n—
\nRHSA-announce mailing list
\nRHSA-announce@redhat.com
\nhttps:\/\/listman.redhat.com\/mailman\/listinfo\/rhsa-announce<\/p>\n","protected":false},"excerpt":{"rendered":"
—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: kernel security and bug fix update Advisory ID: RHSA-2022:8685-01 Product: Red Hat Enterprise Linux Advisory URL: https:\/\/access.redhat.com\/errata\/RHSA-2022:8685 Issue date: 2022-11-29 CVE Names: CVE-2022-1158 ===================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-34273","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/34273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=34273"}],"version-history":[{"count":1,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/34273\/revisions"}],"predecessor-version":[{"id":34289,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/34273\/revisions\/34289"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=34273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=34273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=34273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}