RHSA-2023:0348: Important: kpatch-patch security update
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.Security Fix(es): kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959) kernel: memory corruption in AX88179178A based USB ethernet device. (CVE-2022-2964) kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139) kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:0348?
The severity of RHSA-2023:0348 is critical due to a privilege escalation vulnerability identified as CVE-2022-2959.
How do I fix RHSA-2023:0348?
To fix RHSA-2023:0348, update to the patched version of kpatch-patch, specifically version 5_14_0-162_6_1-1-1.el9_1.
Which systems are affected by RHSA-2023:0348?
RHSA-2023:0348 affects systems running the kpatch-patch package prior to version 5_14_0-162_6_1-1-1.el9_1.
What vulnerability does RHSA-2023:0348 address?
RHSA-2023:0348 addresses a race condition vulnerability in the watch queue that can lead to privilege escalation.
Is RHSA-2023:0348 a live patching vulnerability?
Yes, RHSA-2023:0348 pertains to a kernel live patch module that modifies the code of a running kernel.