kernel-4.18.0-477.27.2.el8_8

エラータID: AXSA:2023-6482:27

Release date: 
Wednesday, October 11, 2023 - 00:42
Subject: 
kernel-4.18.0-477.27.2.el8_8
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

The kernel packages contain the Linux kernel, the core of any Linux operating
system.

Security Fix(es):

* x86/microcode/AMD: Rename a couple of functions (CVE-2023-20593)
* x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (CVE-2023-20593)
* x86/microcode: Check CPU capabilities after late microcode update correctly (CVE-2023-20593)
* x86/microcode: Adjust late loading result reporting message (CVE-2023-20593)
* x86/amd: Cache debug register values in percpu variables (CVE-2023-20593)
* x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (CVE-2023-20593)
* x86/microcode/AMD: Add a @cpu parameter to the reloading functions (CVE-2023-20593)
* x86/microcode/AMD: Fix mixed steppings support (CVE-2023-20593)
* x86/microcode/core: Return an error only when necessary (CVE-2023-20593)
* x86/cpu/amd: Move the errata checking functionality up (CVE-2023-20593)
* x86/cpu/amd: Add a Zenbleed fix (CVE-2023-20593)
* netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (CVE-2023-3390)

Solution: 

Update packages.

CVEs: 
CVE-2023-20593
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
CVE-2023-3390
A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue. We recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97.
Additional Info: 

N/A

Download: 

SRPMS
  1. kernel-4.18.0-477.27.2.el8_8.src.rpm
    MD5: 8a706f88810dfa12fdc8eb47234fbf0d
    SHA-256: 4694ec21b6dd0f44331d02f5af6d38654527f319a44bb9ac5e8a9d917308db71
    Size: 129.81 MB

Asianux Server 8 for x86_64
  1. bpftool-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: 8f8f096cdfa79fa481839fe481085539
    SHA-256: a74f5593039c384a6372a723b41302e20399a16d5ee51fef8de083284f921008
    Size: 10.17 MB
  2. kernel-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: d2b680b76b65f7d5f7d960676d28ad90
    SHA-256: 8afdcdb8ef9ee3806e430a0bef87c6acc459c8cd4cfb76c25cd9299346bf78f7
    Size: 9.40 MB
  3. kernel-abi-stablelists-4.18.0-477.27.2.el8_8.noarch.rpm
    MD5: 266557ca86eba0fe6bbecbb99507563c
    SHA-256: 9546aa4fcd91e0a021f19fb7c353e444468d015a7fa9310458702b9da1f7a475
    Size: 9.42 MB
  4. kernel-core-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: 49e762290e3c6c6871ae85084b477716
    SHA-256: 3adc3ab5ee59fe6f5bced049a568f153847519d14b94008b9f1a82f1e2c20772
    Size: 41.65 MB
  5. kernel-cross-headers-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: a108b2a3bd183755431682f0109c5756
    SHA-256: 5c2bbb5ea25120d52473886fe226b5bdeb2e0d9a05c94dde9bde48b82ef89f0c
    Size: 14.69 MB
  6. kernel-debug-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: 32faa0b34a23486d066967eb5905798c
    SHA-256: c2dd6316a56593e67045db454870593304fd391b408dcacc16fe32cec76b7e90
    Size: 9.40 MB
  7. kernel-debug-core-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: eca3cb1f7532cda940e54d6d2d8e6df4
    SHA-256: e1f4492f83935b86147c51ee574c845058c5600ee07cec05dc7cea03702104a7
    Size: 70.37 MB
  8. kernel-debug-devel-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: f22bc8fc3722591987bd6637eea060ae
    SHA-256: 5c0fa17c37f071490ecbe55021e6b66b5aade84f38d9d9701d42ea4c7147cc39
    Size: 23.09 MB
  9. kernel-debug-modules-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: 9593e6930ea08e735cced23140bcd95a
    SHA-256: 221405f53abec740c2585868d282d475c4b82c700f144362166ed47616a9d815
    Size: 63.38 MB
  10. kernel-debug-modules-extra-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: 05184e3619ef6b533adf092ab2900886
    SHA-256: c3428b49c8c986242fc5af238f907796cc0fc8f7857332e01e7259ec25d7c731
    Size: 10.77 MB
  11. kernel-devel-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: 950e16165e378f15038658e56976956b
    SHA-256: 98c2c5fa6538134b4ebb251c84ac1d78815e594ecabb25e20be3d06ac9e73816
    Size: 22.89 MB
  12. kernel-doc-4.18.0-477.27.2.el8_8.noarch.rpm
    MD5: 049b7ee6764db3eaf8e8fc5f58362257
    SHA-256: a53d6b516ad45aeaf0cee6545d070e6db4d916cc181c856d9978634dc9a52d13
    Size: 27.09 MB
  13. kernel-headers-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: 990693f1e968d06a51f5af22b091d940
    SHA-256: 97b4fdf352e20340237771522a52c01de6f29bbc28568589c86f188b6c8d971e
    Size: 10.74 MB
  14. kernel-modules-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: cc052978975dea8f640a1b8db19b3714
    SHA-256: f816ac20f091ae235a834cfe2150a56374e9d5c41d6abd701d111f0c1ec6e128
    Size: 34.37 MB
  15. kernel-modules-extra-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: 07a1c08153291b325df9e302920ace6b
    SHA-256: ea37a9cf150d61add2a1c8517d009868b8a6f8331b05c32f75e3333969333713
    Size: 10.08 MB
  16. kernel-tools-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: 51f9c6f4f45693b306e89269a2c42570
    SHA-256: 96865f9410074c70476d2e12b93f9be2cd04b0a42cf031d4a5fb774e0fbb4005
    Size: 9.62 MB
  17. kernel-tools-libs-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: dd2035261b8adcaaa2da6010d87d9263
    SHA-256: 27402be86b10cb185226895d69b743f88713efe3b5567cdd215ebc30a4511b58
    Size: 9.41 MB
  18. kernel-tools-libs-devel-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: 6dbf6b58fb1fd9c563c67a730e6afeec
    SHA-256: 1504d93f8244dbeeec61512d2f2ce398d3a8c038c1395e1973f116fb29d964a4
    Size: 9.41 MB
  19. perf-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: 220cdfe5e1bfe639a0f8d15e5e5bddd6
    SHA-256: e3c103300377ddf36764cad0b466729054efacb3d0d734b36de118e4affb3c08
    Size: 11.69 MB
  20. python3-perf-4.18.0-477.27.2.el8_8.x86_64.rpm
    MD5: cb6b3a2b5b2659ae6d064066af007998
    SHA-256: ab63ac2fb7ceade8e3ceae64a5cde7156c35d44ca521244910a7c3dc2a3bac29
    Size: 9.53 MB