RHSA-2023:1092HighCVSS 7.8

Red Hat Security Advisory: kernel-rt security and bug fix update

Published
March 7, 2023
Last Modified
October 14, 2026

🔗 CVE IDs covered (2)

CVE-2022-4378 →CVE-2022-42703 →

📋 Description

CVE-2022-4378 — kernel: stack overflow in do_proc_dointvec and proc_skip_spaces CVE-2022-42703 — kernel: use-after-free related to leaf anon_vma double reuse

🎯 Affected products32

  • Red Hat Enterprise Linux for Real Time (v. 7)
  • Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-0:3.10.0-1160.88.1.rt56.1233.el7.src as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-0:3.10.0-1160.88.1.rt56.1233.el7.src as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-debug-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-debug-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-debug-debuginfo-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-debug-debuginfo-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-debug-devel-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-debug-devel-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-debug-kvm-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-debug-kvm-debuginfo-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-debuginfo-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-debuginfo-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-devel-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-devel-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-doc-0:3.10.0-1160.88.1.rt56.1233.el7.noarch as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-doc-0:3.10.0-1160.88.1.rt56.1233.el7.noarch as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-kvm-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-kvm-debuginfo-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-trace-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-trace-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-trace-debuginfo-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-trace-debuginfo-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • kernel-rt-trace-devel-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-trace-devel-0:3.10.0-1160.88.1.rt56.1233.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)
  • +2 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: A possible workaround is preventing regular users from accessing sysctl files (such as /proc/sys/net/ipv4/tcp_rmem and similar). Also, preventing a user from increasing privileges with commands such as "unshare -rn" (that allows obtaining net namespace privileges required to access /proc/sys/net/ipv4/tcp_rmem). Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (5)