[ALSA-2023:0832] Important: kernel security and bug fix update
Type:
security
Severity:
important
Release date:
2023-09-15
Description:
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: mm/mremap.c use-after-free vulnerability (CVE-2022-41222) * kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945) * kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * WARNING: CPU: 116 PID: 3440 at arch/x86/mm/extable.c:105 ex_handler_fprestore+0x3f/0x50 (BZ#2134586) * Hardware error: RIP: copy_user_enhanced_fast_string+0xe (BZ#2137592) * Cannot trigger kernel dump using NMI on SNO node running PAO and RT kernel (BZ#2139580) * MEI support for Alder Lake-S (BZ#2141783) * Host Pod -> Cluster IP Service traffic (Pod Backend - Different Node) Flow Iperf Cannot Connect (BZ#2141959) * AlmaLinux8.7: Xorg cannot display resolution higher than 1024x768 on system using ast graphics driver (BZ#2149287) * Intel 8.7 Bug: OS doesn't boot when vmd and interrupt remapping are enabled (BZ#2149474) * i40e,iavf: SR-IOV VF devices send GARP with wrong MAC address (BZ#2149745) * AlmaLinux8.4 - boot: Add secure boot trailer (BZ#2151530) * error 524 from seccomp(2) when trying to load filter (BZ#2152138) * Workqueue: WQ_MEM_RECLAIM iscsi_ctrl_1:98 __iscsi_unbind_session [scsi_transport_iscsi] (BZ#2152734) * Connectivity issue with vDPA driver (BZ#2152912) * High Load average due to cfs cpu throttling (BZ#2153108) * The "kernel BUG at mm/usercopy.c:103!" from BZ 2041529 is back on almalinux-8.5 (BZ#2153230) * AlmaLinux8: tick storm on nohz (isolated) CPU cores (BZ#2153653) * kernel BUG: scheduling while atomic: crio/7295/0x00000002 (BZ#2154460) * Azure AlmaLinux 8 z-stream: Sometimes newly deployed VMs are not getting accelerated network during provisioning (BZ#2155272) * Azure: VM Deployment Failures Patch Request (BZ#2155280) * Azure vPCI AlmaLinux-8: add the support of multi-MSI (BZ#2155289) * MSFT MANA NET Patch AlmaLinux-8: Fix race on per-CQ variable napi_iperf panic fix (BZ#2155437) * GSS: OCP 4.10.30 node crash after ODF upgrade : unable to handle kernel NULL pointer dereference at 0000000000000000 : ceph_get_snap_realm+0x68/0xa0 [ceph] (BZ#2155797) * Error in /usr/src/kernels/4.18.0-423.el8.x86_64/scripts/kernel-doc script causing irdma build to fail (BZ#2157905) * AlmaLinux8.8: Backport upstream patches to reduce memory cgroup memory consumption and OOM problem (BZ#2157922) * The 'date' command shows wrong time in nested KVM s390x guest (BZ#2158813) * ethtool -m results in an out-of-bounds slab write in the be2net driver (BZ#2160182) * (AlmaLinux OpenShift)Error downloading big ZIP files inside pod on power OCP and pod getting restarted (BZ#2160221) * i40e/iavf: VF reset task fails "Never saw reset" with 5 second timeout per VF (BZ#2160460) * iavf: It takes long time to create multiple VF interfaces and the VF interface names are not consistent (BZ#2163257)
Updated packages listed below:
Architecture Package Checksum
aarch64 kernel-modules-extra-4.18.0-425.13.1.el8_7.aarch64.rpm 1a7587685310037e24365c7e9fa0e29613e9273f75c5b54cbc220e2caee0b3e3
aarch64 kernel-modules-4.18.0-425.13.1.el8_7.aarch64.rpm 1d311acbd3ff4a5514e55bc9d7b55faa4156fcb8beb83452edb680c66146aafa
aarch64 kernel-debug-modules-4.18.0-425.13.1.el8_7.aarch64.rpm 2b87c3b6a119bab4f6004573a4284851a9cb9e3e7d455128f5175e61cbe9d364
aarch64 bpftool-4.18.0-425.13.1.el8_7.aarch64.rpm 33b799958cf49719b61dff8671be3b5594e747b0165a8461b7ce030d0562176c
aarch64 kernel-debug-modules-extra-4.18.0-425.13.1.el8_7.aarch64.rpm 3a2a6b61ffa1e44a29143748947b8847320f6a9dcf7c912d6190ef6c4b1a4cbe
aarch64 python3-perf-4.18.0-425.13.1.el8_7.aarch64.rpm 3c9d14ae71f0e8095490edc3afe0ee69831e8b2da4f405751bd42d6c1636046f
aarch64 kernel-debug-4.18.0-425.13.1.el8_7.aarch64.rpm 663ddc07108ddbebbb1b35617ff434bd053d6ac47603e7a36580d05b313a3c2c
aarch64 perf-4.18.0-425.13.1.el8_7.aarch64.rpm 6afaf26cf311710338cb71a30b5d3d53d4b13bd5ce1d315ea8e63e0c5bed23d2
aarch64 kernel-4.18.0-425.13.1.el8_7.aarch64.rpm 7e98763ba2dc2b16e49101c86dd02787419d248c04e126a16478120432dfb5e1
aarch64 kernel-devel-4.18.0-425.13.1.el8_7.aarch64.rpm 84e4d53ffce031774ae88c62584fa5d64e6fe061691cb3e5a13c53853ce41edb
aarch64 kernel-debug-core-4.18.0-425.13.1.el8_7.aarch64.rpm 8d4824e0576159314f0c970d25857d37c85b500fa3084ab76b127c73345490de
aarch64 kernel-tools-libs-4.18.0-425.13.1.el8_7.aarch64.rpm 8ea61acc605794be621795fe1fdbfafa9e061052ebe2c43b2988d091fc284fad
aarch64 kernel-tools-4.18.0-425.13.1.el8_7.aarch64.rpm 973ba994695eaf0e380cee4e6c441bc1c7ecf6649b0730db87855ba39121d33c
aarch64 kernel-tools-libs-devel-4.18.0-425.13.1.el8_7.aarch64.rpm a71a12d87db38ac957114373e90e4b78a44249b7e93a6ea7b6b0a3e2d2035123
aarch64 kernel-core-4.18.0-425.13.1.el8_7.aarch64.rpm b1ec59acc12e89e1a41dbb29b60fe0463e7851505cc612f5459230d4029d2be2
aarch64 kernel-debug-devel-4.18.0-425.13.1.el8_7.aarch64.rpm cb0d270cda9cf6c453992494d2e98361e6acbe8cac8035ecc206f219f1372748
aarch64 kernel-cross-headers-4.18.0-425.13.1.el8_7.aarch64.rpm d186f036d27d60ea674df975319ed0426185df1132ad520a1d44e1c14a36f564
noarch kernel-abi-stablelists-4.18.0-425.13.1.el8_7.noarch.rpm 6ffccb5b0f55abf091e050631c3e5d78bad77c7ddbd9cc859bb6ab5c8828d2b9
noarch kernel-doc-4.18.0-425.13.1.el8_7.noarch.rpm f5ee6c4e8aab5b63a4794f0c33405c8f7b5709a5ed182f73b04c9ef90aa852b9
ppc64le kernel-4.18.0-425.13.1.el8_7.ppc64le.rpm 0d0e6069c1e4128cc278c6017402aac0d36f5e3fd2f4e54d3c688fb4dbfc952f
ppc64le python3-perf-4.18.0-425.13.1.el8_7.ppc64le.rpm 1bbd7c05c6b6c859ecb961328af219ae82209b209d9864432c909f493f6518b1
ppc64le kernel-debug-modules-4.18.0-425.13.1.el8_7.ppc64le.rpm 2015a57c488c54ac1fb032dce727a0f2af920d5922b894ed9cb781d47af53b8e
ppc64le kernel-tools-libs-4.18.0-425.13.1.el8_7.ppc64le.rpm 234aacf70797dd296c9aa4ccea53d7e4fdde2160f7d77a819f1d2f04247da1d0
ppc64le kernel-modules-4.18.0-425.13.1.el8_7.ppc64le.rpm 2c9ca44ed5a582bbad84227eb52590141bf3074934d981b0addd65160fcf6ca3
ppc64le kernel-core-4.18.0-425.13.1.el8_7.ppc64le.rpm 2d64b7695e35e17781b0293cfa89533457589da2bd0b3c6f1e100682263182a3
ppc64le kernel-debug-modules-extra-4.18.0-425.13.1.el8_7.ppc64le.rpm 42964acd2044a27920bb389d194e32d6aff904776431f37beebbd1897b5a59c9
ppc64le kernel-debug-4.18.0-425.13.1.el8_7.ppc64le.rpm 44c9bf0dc997103767a194d81249fabc3ad6d729297cbd2d1bf49b8033d74de1
ppc64le kernel-debug-core-4.18.0-425.13.1.el8_7.ppc64le.rpm 4a4d6aab77a71bbb4f6c190e78c2d0fa260fd1f9e9b8cdb5eb46ba1230a16364
ppc64le kernel-modules-extra-4.18.0-425.13.1.el8_7.ppc64le.rpm 51d3e07df144d99aecfc228598f995d1cc165016b6c7ec393969827d9708b73a
ppc64le perf-4.18.0-425.13.1.el8_7.ppc64le.rpm 7239243dc4755ad8da09c1c972cb4d670cd9e6f81b0bdad075d2fba668c31d72
ppc64le kernel-tools-4.18.0-425.13.1.el8_7.ppc64le.rpm 74569ae60bb30fa47e4b6633352be24e87faadd23432c843168ee4516caa177c
ppc64le kernel-debug-devel-4.18.0-425.13.1.el8_7.ppc64le.rpm b2929b29fa301205857943c54bb511664bd1934670c6e7eced6164912d9f9807
ppc64le kernel-tools-libs-devel-4.18.0-425.13.1.el8_7.ppc64le.rpm d578043a91d6113715094d984c6651c153631c38c9057d5aba472fd087db87e2
ppc64le bpftool-4.18.0-425.13.1.el8_7.ppc64le.rpm e718e000b8cef4640898d6336cd97daba1c19fc9231e64c11bcfbacc94dbd4ba
ppc64le kernel-devel-4.18.0-425.13.1.el8_7.ppc64le.rpm e9e97d8c62f33da503b959588ef7d2c56d526471e068ee9c60b57254eef65a7b
ppc64le kernel-cross-headers-4.18.0-425.13.1.el8_7.ppc64le.rpm f3803fd3ff13bba17927ec5c567b26e6a5b50601e63c93df6f99f52871dcc246
s390x kernel-zfcpdump-4.18.0-425.13.1.el8_7.s390x.rpm 0bc1b67c70e869f7b530ee5f1fe4c6a0c56fb2b48ff6a745f84cf726b9eff209
s390x kernel-debug-4.18.0-425.13.1.el8_7.s390x.rpm 141e21fa224f225465e0154f20ab29d3bf1cf3dfae87328c8f7aa239e0097746
s390x kernel-cross-headers-4.18.0-425.13.1.el8_7.s390x.rpm 1a555dd7f9ac05ce649ef68a35a685dd33665b6f81caad47f7dfa201277a9726
s390x kernel-debug-core-4.18.0-425.13.1.el8_7.s390x.rpm 2347ac38f637a13096a414a5cf5699ff43965ec1178bdf9d7cd3d459d10e4603
s390x kernel-zfcpdump-modules-4.18.0-425.13.1.el8_7.s390x.rpm 26d19a4becaaa14620b15ab614759c9ab4a4a15c3d9691a5d8194aaa9e9f5c73
s390x kernel-debug-modules-4.18.0-425.13.1.el8_7.s390x.rpm 3d0c328840a3db0104e349b8c55546cda8d8d555aea77332991cb57a3f2aee15
s390x kernel-core-4.18.0-425.13.1.el8_7.s390x.rpm 4216147e1ce5e63ff26edf07536db46cd39cd974288a5235115cebadc6d432b5
s390x kernel-zfcpdump-core-4.18.0-425.13.1.el8_7.s390x.rpm 506f2ea58fdde62007fb959794939770f0bc0a5ee258fbcdbba0f79ed8e63e3e
s390x kernel-zfcpdump-devel-4.18.0-425.13.1.el8_7.s390x.rpm 5dd0a425f27837490d24b2373c601afca6e74220d10c9c02394a0f667363fb00
s390x kernel-devel-4.18.0-425.13.1.el8_7.s390x.rpm 6bd36d3f66b7a8a2aeba4282307479882d9e40b921cd4b44b403be34e0976bd0
s390x kernel-debug-devel-4.18.0-425.13.1.el8_7.s390x.rpm 78858262e8478741b599e723170763a1db1e75fa6a614d1040c440e8f39f77ff
s390x kernel-modules-extra-4.18.0-425.13.1.el8_7.s390x.rpm 7bb618582898c3f05a062d664e19df035ea11d7b787a1d168afec3564cc3d63f
s390x python3-perf-4.18.0-425.13.1.el8_7.s390x.rpm a072ec65e532a74a26a5f04f35b96dab4714485aa11c938676b0c6570c075637
s390x kernel-zfcpdump-modules-extra-4.18.0-425.13.1.el8_7.s390x.rpm a29338db06ac8728d0039fb2cde327bc700c07df3ffc0c74272bfe7b1838239d
s390x kernel-tools-4.18.0-425.13.1.el8_7.s390x.rpm c2e5f0ca3846758592fec7b91b57effaeaece88304e58f446ca840ed4ba4315f
s390x bpftool-4.18.0-425.13.1.el8_7.s390x.rpm c83c1e4690228a39803e26cfea3902bf7328624bfedab0fd81e2c3d813e47370
s390x kernel-4.18.0-425.13.1.el8_7.s390x.rpm daccb452e9694423f2abb9634284468e4ab1e6e0a96071b5326f2a30f824eb00
s390x kernel-debug-modules-extra-4.18.0-425.13.1.el8_7.s390x.rpm db9a83cbda76c556a11aaf10c0143f14d58b3b477968ad73cafc3da1cbab6841
s390x kernel-modules-4.18.0-425.13.1.el8_7.s390x.rpm f5d246613367cfd45ff3dc425f5d22fd1c9e5b2aba9305b5683988e80a3328dc
s390x perf-4.18.0-425.13.1.el8_7.s390x.rpm f73f81bf81640c24b7b3d1734c79c51b81c59d470d2a62f6ee23d3a3692b6869
x86_64 kernel-tools-libs-4.18.0-425.13.1.el8_7.x86_64.rpm 01c6e71fd048f0bc0d027b7caebc303b7f0f0f442da2913df9ce5d72aa8be5f9
x86_64 kernel-modules-extra-4.18.0-425.13.1.el8_7.x86_64.rpm 02caaa499720d17220b5228c08f597e9f258dc267318aef8a76b2bf5332a7e34
x86_64 kernel-core-4.18.0-425.13.1.el8_7.x86_64.rpm 0e6ba64c706cca67ea88f1dd3057863803bf6c971868435ccdbb49a1388bb63f
x86_64 kernel-debug-core-4.18.0-425.13.1.el8_7.x86_64.rpm 1432c78633db7009226fb4a5912a00cb4853632f47b358d1ab72f8ce2f56d12d
x86_64 kernel-debug-devel-4.18.0-425.13.1.el8_7.x86_64.rpm 152e49153a33e216d957c5c20c81ca0ba7686d2c99c79f3644db57ccea35a187
x86_64 kernel-debug-modules-4.18.0-425.13.1.el8_7.x86_64.rpm 352eaf938960f8781a3acd5ab5336e2ee72962c84ede7f55ecaba89332b734f7
x86_64 perf-4.18.0-425.13.1.el8_7.x86_64.rpm 428c9c19cac5a815b1c3b55f6e63b139a0368630bce7c81b4f9b6a54bb3265da
x86_64 kernel-cross-headers-4.18.0-425.13.1.el8_7.x86_64.rpm 53196097e166eb929046ba968accb1697a997dfe88b69764cad579e04f54c099
x86_64 kernel-debug-modules-extra-4.18.0-425.13.1.el8_7.x86_64.rpm 656092c366832f277e04d557328b6a22123b4128cdc390fd114d66c1c8fd9e15
x86_64 kernel-modules-4.18.0-425.13.1.el8_7.x86_64.rpm 6ca4f6cd2a0dba7ab7226033153c9fc2b4d9a7c4f9e736c267bf6fa315789cb9
x86_64 kernel-debug-4.18.0-425.13.1.el8_7.x86_64.rpm 7927b736a2184a3f600b11260f80db8d4a54b337f340b6293f3e237f73c1c447
x86_64 kernel-devel-4.18.0-425.13.1.el8_7.x86_64.rpm 7c6bd5dcec6958884fc7dd1f7176e1b14f24a268fb2ca2bbf8eda9930c0f8e13
x86_64 bpftool-4.18.0-425.13.1.el8_7.x86_64.rpm 8002b2da27fa44bb266fb56b61d532c86802bb6d722e60950a6d2a1d3e22e39c
x86_64 kernel-tools-libs-devel-4.18.0-425.13.1.el8_7.x86_64.rpm 80d95e1b6bc1a3f35cee974a1e98fd6ab6e16d4c8e78465db52245b0842aecfa
x86_64 kernel-tools-4.18.0-425.13.1.el8_7.x86_64.rpm a6f0437eece9da965a690926bd86c60eb0839235a87f7cc8690c5244c70dc329
x86_64 python3-perf-4.18.0-425.13.1.el8_7.x86_64.rpm ba8ff9fd001478f1a4cf8a228ed56738960aebed6eda0dfce1429d497a8d3c80
x86_64 kernel-4.18.0-425.13.1.el8_7.x86_64.rpm f3557ab858b51ea5a5d3552ba8468c8ec646357b301b70e5a5c039d1637f18b1
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.