kernel-4.18.0-348.20.1.el8_5

The kernel packages contain the Linux kernel, the core of any Linux operating system.

The following packages have been upgraded to a later upstream version: kernel (4.18.0).

Security Fix(es):

* kernel: improper initialization of the "flags" member of the new pipe_buffer (CVE-2022-0847)
* kernel: Use After Free in unix_gc() which could result in a local privilege escalation (CVE-2021-0920)
* kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout (CVE-2021-4154)
* kernel: possible privileges escalation due to missing TLB flush (CVE-2022-0330)
* kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS (CVE-2022-0435)
* kernel: cgroups v1 release_agent feature may allow privilege escalation (CVE-2022-0492)
* kernel: missing check in ioctl allows kernel memory read/write (CVE-2022-0516)
* kernel: failing usercopy allows for use-after-free exploitation (CVE-2022-22942)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Intel QAT Kernel power up fix
* scsi_dma_map failed with mpt3sas driver and affecting performance
* [Lenovo 8.4 bug] audio_HDMI certification failed(No hdmi out)
* [4.18.0-323.el8.ppc64le][POWER8/9/10] security_flavor mode is not set back to zero post online migration
* iommu/amd: Fix unable to handle page fault due to AVIC
* [Lenovo 8.4 bug]The VGA display shows no signal (black screen) when install MIRACLE LINUX in the legacy BIOS mode.
* Double free of kmalloc-64 cache struct ib_port->pkey_group from module ib_core.
* Bus error with huge pages enabled
* MIRACLE LINUX - kvm: floating interrupts may get stuck
* Data corruption on small files served by httpd, which is backed by cifs-mount
* Add a net/mlx5 patch for Hardware Offload Fix
* Windows guest random Bsod when 'hv-tlbflush' enlightenment is enabled
* DNS lookup failures when run two times in a row
* net/sched: Fix ct zone matching for invalid conntrack state
* Kernel 4.18.0-348.2.1 secpath_cache memory leak involving strongswan tunnel
* OCP node XFS metadata corruption after numerous reboots
* Broadcom bnxt_re: RDMA stats are not incrementing
* ice: bug fix series for 8.6
* panic while looking up a symlink due to NULL i_op->get_link
* ceph omnibus backport for MIRACLE LINUX
* SCTP peel-off with SELinux and containers in OCP
* Selinux is not allowing SCTP connection setup between inter pod communication in enforcing mode
* dnf fails with fsync() over local repository present on CIFS mount point

CVE-2021-0920
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel
CVE-2021-4154
A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.
CVE-2022-0330
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
CVE-2022-0435
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
CVE-2022-0492
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
CVE-2022-0516
A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to 5.17-rc4.
CVE-2022-0847
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
CVE-2022-22942
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.