[Important] [Security] Virtuozzo ReadyKernel Patch 155.1 for Virtuozzo Hybrid Server 7.5

2023-03-2700:00:00

docs.virtuozzo.com

virtuozzo readykernel

patch 155.1

security fixes

virtuozzo hybrid server 7.5

vulnerability id

cve-2022-3564

bluetooth

l2cap_rx_state_recv

cve-2022-2663

netfilter fix

irc helper

cve-2022-3545

nfp device driver

cve-2022-4379

nfsv4.1 double svc_xprt_put

proc_skip_spaces

cve-2022-4378

xprtrdma header size calculations.

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

58.9%

JSON

The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5.
Vulnerability id: CVE-2022-3564
[3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] A Bluetooth use-after-free in the Bluetooth l2cap_rx_state_recv.

Vulnerability id: CVE-2022-2663
[3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] A netfilter fix in the IRC helper.

Vulnerability id: CVE-2022-3545
[3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] A use-after-free in the NFP device driver.

Vulnerability id: CVE-2022-4379
[3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] NFSv4.1 double svc_xprt_put if rpc_create failures.

Vulnerability id: CVE-2022-4378
[3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] A proc string out of bound in proc_skip_spaces().

Vulnerability id: CVE-2022-0812
[3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] xprtrdma incorrect header size calculations.

OSVersionArchitecturePackageVersionFilename
Virtuozzo Hybrid Server7.5x86_64readykernel-patch-183.5< 155.1-1.vl7readykernel-patch-183.5-155.1-1.vl7.x86_64.rpm
Virtuozzo Hybrid Server7.5x86_64readykernel-patch-185.3< 155.1-1.vl7readykernel-patch-185.3-155.1-1.vl7.x86_64.rpm
Virtuozzo Hybrid Server7.5x86_64readykernel-patch-191.4< 155.1-1.vl7readykernel-patch-191.4-155.1-1.vl7.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
Virtuozzo Hybrid Server	7.5	x86_64	readykernel-patch-183.5	< 155.1-1.vl7	readykernel-patch-183.5-155.1-1.vl7.x86_64.rpm
Virtuozzo Hybrid Server	7.5	x86_64	readykernel-patch-185.3	< 155.1-1.vl7	readykernel-patch-185.3-155.1-1.vl7.x86_64.rpm
Virtuozzo Hybrid Server	7.5	x86_64	readykernel-patch-191.4	< 155.1-1.vl7	readykernel-patch-191.4-155.1-1.vl7.x86_64.rpm