kernel-4.18.0-348.23.1.el8_5

The kernel packages contain the Linux kernel, the core of any Linux operating
system.

Security Fix(es):

* kernel: use-after-free in RDMA listen() (CVE-2021-4028)
* kernel: heap out of bounds write in nf_dup_netdev.c (CVE-2022-25636)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

Bug Fix(es):

* Backport DFS fixes from upstream
* lpfc driver often fails to detect storage directly connected to
Broadcom FC HBA
* nf_reinject calls nf_queue_entry_free on an already freed entry->state
* gfs2 blocking in gdlm_lock

CVE-2021-4028
** RESERVED ** This candidate has been reserved by an organization or individual
that will use it when announcing a new security problem. When the candidate has
been publicized, the details for this candidate will be provided.
CVE-2022-25636
net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows
local users to gain privileges because of a heap out-of-bounds write. This is
related to nf_tables_offload.