Red Hat Kernel Multiple Vulnerabilities

Impact

• Denial of Service
• Remote Code Execution
• Information Disclosure
• Elevation of Privilege

System / Technologies affected

• Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
• Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
• Red Hat CodeReady Linux Builder for x86_64 8 x86_64
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for Real Time 8 x86_64
• Red Hat Enterprise Linux for Real Time for NFV 8 x86_64
• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Virtualization Host 4 for RHEL 8 x86_64

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Apply fixes issued by the vendor:
  https://access.redhat.com/errata/RHSA-2022:1975
  https://access.redhat.com/errata/RHSA-2022:1988

Vulnerability Identifier

• CVE-2020-0404
• CVE-2020-4788
• CVE-2020-13974
• CVE-2020-27820
• CVE-2021-0941
• CVE-2021-3612
• CVE-2021-3669
• CVE-2021-3743
• CVE-2021-3744
• CVE-2021-3752
• CVE-2021-3759
• CVE-2021-3764
• CVE-2021-3772
• CVE-2021-3773
• CVE-2021-4002
• CVE-2021-4037
• CVE-2021-4083
• CVE-2021-4157
• CVE-2021-4197
• CVE-2021-4203
• CVE-2021-20322
• CVE-2021-21781
• CVE-2021-26401
• CVE-2021-29154
• CVE-2021-37159
• CVE-2021-41864
• CVE-2021-42739
• CVE-2021-43056
• CVE-2021-43389
• CVE-2021-43976
• CVE-2021-44733
• CVE-2021-45485
• CVE-2021-45486
• CVE-2022-0001
• CVE-2022-0002
• CVE-2022-0286
• CVE-2022-0322
• CVE-2022-1011

Source

• Red Hat
• AusCERT

Related Link

• https://access.redhat.com/errata/RHSA-2022:1975
• https://access.redhat.com/errata/RHSA-2022:1988
• https://www.auscert.org.au/bulletins/ESB-2022.2234
• https://www.auscert.org.au/bulletins/ESB-2022.2236