A kernel-rt security and bug fix update has been released for AlmaLinux 9.2.
ALSA-2023:4378 Important: kernel-rt security and bug fix update
Type:
security
Severity:
important
Release date:
2023-08-08
Description
Security Fix(es):
* kernel: ipvlan: out-of-bounds write caused by unclear skb->cb (CVE-2023-3090)
* kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788)
* kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869)
* kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458)
* kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
CVE-2022-45869
CVE-2023-0458
CVE-2023-1998
CVE-2023-3090
CVE-2023-35788
RHSA-2023:4378
ALSA-2023:4378
Updates packages:
kernel-rt-debug-kvm-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
kernel-rt-debug-modules-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
kernel-rt-modules-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
kernel-rt-kvm-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
kernel-rt-devel-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
kernel-rt-core-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
kernel-rt-debug-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
kernel-rt-modules-core-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
kernel-rt-debug-modules-extra-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
kernel-rt-debug-modules-core-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
kernel-rt-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
kernel-rt-modules-extra-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
kernel-rt-debug-devel-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
kernel-rt-debug-core-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.ALSA-2023:4378 Important: kernel-rt security and bug fix update
