readykernel-patch-185.3-151.0-1.vl7

Kernel Update Version:
3.10.0-1160.53.1.vz7.185.3
Release Date:
2022-12-28 12:07:02
  • PSBM-142789

    network packet corruption

    Unstable network connection caused by corruption packets in the network card driver.
  • PSBM-143283

    stale pointer in oom_context->victim

    Possible kernel crash while handling out of memory situation.
  • CVE-2022-3202

    Null Pointer Dereference in JFS filesystem.

    An attacker could use prepared image to crash the system or leak internal kernel information.
    https://access.redhat.com/security/cve/cve-2022-3202
  • PSBM-142895

    netfilter: core: Improper NAT hooks collision check.

    Hooks collision during nftables and iptables hooks registering.
  • PSBM-141114

    blk-cbt: Percpu allocation leak.

    A memory leak in Changed Block Tracking code.
  • PSBM-141577

    Potential deadlock when lazytime-enabled mounted ploop is running on top of a fuse-based vStorage.

    There is a possible deadlock if a lazytime-enabled mounted ploop is running on top of vStorage. This tweak provides the ability to disable default lazytime mount option for ext4 mounts. For technical reasons this tweak is united with the oom_dump_tasks sysctl. You should use this sysctl in the following way: "echo 0 > /proc/sys/vm/oom_dump_tasks" - disable lazytime default and oom tasks dumping; "echo 1 > /proc/sys/vm/oom_dump_tasks" - disable lazytime default, enable oom tasks dumping; "echo 2 > /proc/sys/vm/oom_dump_tasks" - enable lazytime default, disable oom tasks dumping; "echo 3 > /proc/sys/vm/oom_dump_tasks" - enable lazytime default and oom tasks dumping.
  • PSBM-141578

    netfilter: nf_tables: NULL pointer access in chain filter.

    NULL pointer accsess in nf_tables chain filter leads to node crash.
  • CVE-2021-4155

    Reading data from partially written XFS file block.

    A data leak flaw was found in XFS filesystem. An attacker could use this flaw to read deleted data.
    https://access.redhat.com/security/cve/cve-2021-4155
  • CVE-2022-22942

    Use after free for file descriptor table for vmwgfx

    use-after-free flaw was found in the Linux kernel’s vmw_execbuf_copy_fence_user function in vmwgfx. This flaw allows a local attacker with user privileges to cause a privilege escalation problem.
    https://access.redhat.com/security/cve/cve-2022-22942
  • CVE-2022-0330

    Kernel buffers data leak or race in intel GPU driver.

    Incorrect GPU cache flush may allow access to system memory and run malicious code on GPU.
    https://access.redhat.com/security/cve/cve-2022-0330
  • PSBM-140896

    Potential ARP DoS for containers in host-routed network mode.

  • PSBM-141526

    nfs: Excess dput in __put_nfs_open_context leads to a crash.

    There is double dput in nfs_prime_dcache(). Because of this excess dput we get a crash in __put_nfs_open_context().
  • CVE-2022-1966

    Use-after-free in the netfilter subsystem.

    The bug allows to initialize a non-stateful lookup expressions which points to a not properly detached set, which might lead to UAF. Potetntially it leads to privilege escalation.
    https://access.redhat.com/security/cve/CVE-2022-1966
  • PSBM-139465

    CPU hotplug leads to a VM crash on AMD processors with PCID.

  • CVE-2022-0492

    Potential privilege escalation when setting the release_agent.

    Setting release_agent could potentially lead to privilege escalation from unprivileged users inside a container to the container root. It couldn't be exploited to escape containers.
    https://access.redhat.com/security/cve/CVE-2022-0492
  • CVE-2021-0920

    Potential use-after-free in the 'recv' operation of UNIX domain sockets.

    Race condition between the garbage collector and the 'recv' operation with MSG_PEEK flag was found in the implementation of UNIX domain sockets. It could result in use-after-free and could potentially allow a local attacker to escalate their privileges in the system.
    https://access.redhat.com/security/cve/CVE-2021-0920
  • CVE-2021-4083

    Read-after-free in garbage collection for Unix domain socket file handlers.

  • CVE-2021-4028

    Use-after-free in RDMA listen().

  • VSTOR-55377

    A hole in vstorage FUSE synchronization protocol leading to unsynchronized chunks.

  • PSBM-141136

    ms/xfrm: fix crash in XFRM_MSG_GETSA netlink handler