ALSA-2022:1550

See a problem?
Source
https://errata.almalinux.org/8/ALSA-2022-1550.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2022:1550.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2022:1550
Related
Published
2022-04-26T13:49:36Z
Modified
2023-09-15T13:41:48Z
Summary
Important: kernel security and bug fix update
Details

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: use-after-free in RDMA listen() (CVE-2021-4028)

  • kernel: heap out of bounds write in nfdupnetdev.c (CVE-2022-25636)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Backport DFS fixes from upstream (BZ#2056329)

  • [AlmaLinux8.5] lpfc driver often fails to detect storage directly connected to Broadcom FC HBA (BZ#2058193)

  • nfreinject calls nfqueueentryfree on an already freed entry->state (BZ#2061446)

  • gfs2 blocking in gdlm_lock (BZ#2069750)

References

Affected packages

AlmaLinux:8 / kernel-tools-libs-devel

Package

Name
kernel-tools-libs-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-348.23.1.el8_5