(RHSA-2022:0820) Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

The following packages have been upgraded to a later upstream version: kernel (4.18.0). (BZ#2036933)

Security Fix(es):

• kernel: improper initialization of the “flags” member of the new pipe_buffer (CVE-2022-0847)

• kernel: fget: check that the fd still exists after getting a ref to it (CVE-2021-4083)

• kernel: possible privileges escalation due to missing TLB flush (CVE-2022-0330)

• kernel: cgroups v1 release_agent feature may allow privilege escalation (CVE-2022-0492)

• kernel: failing usercopy allows for use-after-free exploitation (CVE-2022-22942)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

• [Intel 8.3 Bug] ICX Whitley: PCIe - kernel panic with AER-INJECT (BZ#2040309)

• [ESXi][RHEL8] A task is stuck waiting for the completion of the vmci_resouce releasing upon the balloon reset. [None8.2.0.z] (BZ#2052200)