kernel-3.10.0-1160.88.1.el7

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)
* kernel: use-after-free related to leaf anon_vma double reuse (CVE-2022-42703)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Regression - SAS3416 card works on Asianux Server 7 old-version and below, does not work on Asianux Server 7
* use-after-free in sctp_do_8_2_transport_strike
* Asianux Server 7 - [Regression] Kernel test failed during CPU polarization test - lscpu, chcpu - LPAR
* Asianux Server 7, block: Crash in blk_mq_rq_timed_out() when dereferencing NULL request->q pointer
* qla2xxx: Qlogic double completion races during error handling are still not fixed and this will also be a MIRACLE LINUX 8+ exposure
* kernel 3.10.0-1160.80.1.el7.x86_64 on Xeon E55xx crashes upon KVM startup
* Guest's time jumped forward by 12 minutes _after_ live-migration completes (in 30 seconds)
* Asianux Server 7: target crashes if a malicious initiator sends a logout immediately after a login command
* Asianux Server 7 - LTP testcase creat09 fails related to 'CVE-2018-13405' and 'CVE-2021-4037`

CVE-2022-42703
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.
CVE-2022-4378
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.