Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2022:1209
HistoryApr 05, 2022 - 2:07 p.m.

(RHSA-2022:1209) Important: kernel-rt security and bug fix update

2022-04-0514:07:14
access.redhat.com
29

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.8%

JSON

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS (CVE-2022-0435)

  • kernel: out-of-bounds read in in vc_do_resize function in drivers/tty/vt/vt.c (CVE-2020-8647)

  • kernel: invalid read location in vgacon_invert_region function in drivers/video/console/vgacon.c (CVE-2020-8649)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • kernel-rt: update RT source tree to the latest RHEL-8.2.z16 Batch (BZ#2066950)
OSVersionArchitecturePackageVersionFilename
RedHat8x86_64kernel-rt-debug-core< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-debug-core-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-modules< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-modules-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-debug-devel< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-debug-devel-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-core< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-core-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-debuginfo< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-debuginfo-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-debug-modules-extra< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-debug-modules-extra-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-devel< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-devel-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-debug< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-debug-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-kvm< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-kvm-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
RedHat8x86_64kernel-rt-debug-debuginfo< 4.18.0-193.80.1.rt13.130.el8_2kernel-rt-debug-debuginfo-4.18.0-193.80.1.rt13.130.el8_2.x86_64.rpm
Rows per page:
1-10 of 151

Related

nessus 66
redhat 12
ubuntu 6
f5 1
ubuntucve 4
suse 3
openvas 34
photon 9
cve 3
prion 3
debiancve 3
veracode 3
redhatcve 3
cbl_mariner 4
oraclelinux 8
cnvd 1
mageia 4
githubexploit 1
fedora 2
rocky 4
cloudlinux 1
osv 11
cloudfoundry 2
slackware 2
almalinux 1
ibm 2
debian 4
threatpost 1
amazon 1
nessus
nessus
RHEL 8 : kernel-rt (RHSA-2022:1209)
2022-04-06 00:00:00
RHEL 8 : kernel (RHSA-2022:1213)
2022-04-06 00:00:00
openSUSE Security Update : the Linux Kernel (openSUSE-2020-388)
2020-03-30 00:00:00
redhat
redhat
(RHSA-2022:1213) Important: kernel security update
2022-04-05 14:11:11
(RHSA-2022:1619) Important: kpatch-patch security update
2022-04-27 07:22:43
(RHSA-2022:1186) Important: kpatch-patch security update
2022-04-05 08:02:16
ubuntu
ubuntu
Kernel Live Patch Security Notice
2020-05-01 00:00:00
Kernel Live Patch Security Notice
2020-06-09 00:00:00
Linux kernel vulnerabilities
2022-03-22 00:00:00
f5
f5
K03310902 : Multiple Linux vulnerabilities CVE-2020-8647,CVE-2020-8648, CVE-2020-8649
2020-03-26 00:00:00
ubuntucve
ubuntucve
CVE-2020-27418
2023-08-22 00:00:00
CVE-2020-8649
2020-02-06 00:00:00
CVE-2020-8647
2020-02-06 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2020-03-27 00:00:00
Security update for the Linux Kernel (critical)
2022-02-10 00:00:00
Security update for the Linux Kernel (critical)
2022-02-11 00:00:00
openvas
openvas
openSUSE: Security Advisory for the (openSUSE-SU-2020:0388-1)
2020-03-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0836-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2020-0140)
2022-01-28 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2020-0221
2020-03-17 00:00:00
Critical Photon OS Security Update - PHSA-2022-0152
2022-02-11 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0287
2020-04-04 00:00:00
cve
cve
CVE-2020-8649
2020-02-06 01:15:00
CVE-2020-8647
2020-02-06 01:15:00
CVE-2022-0435
2022-03-25 19:15:00
prion
prion
Design/Logic Flaw
2020-02-06 01:15:00
Design/Logic Flaw
2020-02-06 01:15:00
Stack overflow
2022-03-25 19:15:00
debiancve
debiancve
CVE-2020-8649
2020-02-06 01:15:00
CVE-2020-8647
2020-02-06 01:15:00
CVE-2022-0435
2022-03-25 19:15:00
veracode
veracode
Out Of Bound Reads (OOB)
2020-11-05 03:09:53
Denial Of Service (DoS)
2020-11-05 03:09:54
Denial Of Service (DoS)
2022-03-26 18:15:22
redhatcve
redhatcve
CVE-2020-8647
2020-02-13 12:15:16
CVE-2020-8649
2020-02-13 12:15:08
CVE-2022-0435
2022-02-10 15:52:24
cbl_mariner
cbl_mariner
CVE-2020-8647 affecting package kernel 5.4.91-6
2021-04-06 23:51:14
CVE-2020-8649 affecting package kernel 5.4.91-6
2021-04-06 23:51:14
CVE-2022-0435 affecting package kernel 5.15.32.1-3
2022-06-03 17:54:27
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2020-05-18 00:00:00
Unbreakable Enterprise kernel security update
2020-05-11 00:00:00
Unbreakable Enterprise kernel security update
2020-05-06 00:00:00
cnvd
cnvd
Linux kernel buffer overflow vulnerability (CNVD-2022-68616)
2022-02-14 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2020-03-14 02:19:55
Updated kernel-linus packages fix security vulnerabilities
2020-04-04 01:53:32
Updated kernel packages fix security vulnerabilities
2022-02-15 23:50:31
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Linux Linux Kernel
2023-04-20 17:29:02
fedora
fedora
[SECURITY] Fedora 34 Update: kernel-5.16.9-100.fc34
2022-02-17 03:07:22
[SECURITY] Fedora 35 Update: kernel-5.16.9-200.fc35
2022-02-17 03:16:11
rocky
rocky
kernel-rt security and bug fix update
2022-03-11 02:24:05
kernel security, bug fix, and enhancement update
2022-03-11 02:26:54
kernel-rt security and bug fix update
2022-03-10 14:37:54
cloudlinux
cloudlinux
Fix of 13 CVEs
2022-04-21 21:21:15
osv
osv
linux-oem-5.14 vulnerabilities
2022-02-22 22:45:56
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-hwe, linux-gcp, linux-gcp-4.15, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
2022-03-22 07:46:46
Important: kernel-rt security and bug fix update
2022-03-10 14:37:54
cloudfoundry
cloudfoundry
USN-5339-1: Linux kernel vulnerabilities | Cloud Foundry
2022-05-23 00:00:00
USN-5338-1: Linux kernel vulnerabilities | Cloud Foundry
2022-04-14 00:00:00
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2022-03-09 04:16:04
[slackware-security] Slackware 14.2 kernel
2020-03-26 23:13:28
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2022-03-10 14:43:03
ibm
ibm
Security Bulletin: Vulnerabilities in Linux Kernel and Java affect IBM Spectrum Protect Plus
2021-03-03 21:46:54
Security Bulletin: IBM Security Guardium is affected by kernel vulnerabilities
2021-04-13 16:24:15
debian
debian
[SECURITY] [DSA 5092-1] linux security update
2022-03-07 12:54:12
[SECURITY] [DLA 2242-1] linux-4.9 security update
2020-06-10 10:48:38
[SECURITY] [DSA 4698-1] linux security update
2020-06-09 19:44:16
threatpost
threatpost
Two Critical Android Bugs Open Door to RCE
2020-06-02 17:10:58
amazon
amazon
Important: kernel
2022-03-07 23:19:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.8%

JSON
Related for RHSA-2022:1209
nessus66redhat12ubuntu6f51ubuntucve4suse3openvas34photon9cve3prion3debiancve3veracode3redhatcve3cbl_mariner4oraclelinux8cnvd1mageia4githubexploit1fedora2rocky4cloudlinux1osv11cloudfoundry2slackware2almalinux1ibm2debian4threatpost1amazon1