Lucene search

K
virtuozzoVirtuozzoVZA-2022-021
HistoryJun 29, 2022 - 12:00 a.m.

[Important] [Security] Virtuozzo ReadyKernel patch 143.0 for Virtuozzo Hybrid Server 7.0, 7.5

2022-06-2900:00:00
docs.virtuozzo.com
19
virtuozzo
readykernel
patch
security
update
hybrid server 7.x
vulnerability
cve-2022-1966
kernel
bug
uaf
psbm-139465
cpu
hotplug
vm
crash
amd
processors
pcid
unix

The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.x.
Vulnerability id: CVE-2022-1966
[3.10.0-1127.8.2.vz7.158.8 to 3.10.0-1160.53.1.vz7.185.3] The bug allows to initialize a non-stateful lookup expressions which points to a not properly detached set, which might lead to UAF.

Vulnerability id: PSBM-139465
[3.10.0-1127.8.2.vz7.158.8 to 3.10.0-1160.53.1.vz7.185.3] CPU hotplug leads to a VM crash on AMD processors with PCID.