MGASA-2022-0062
- Source
- https://advisories.mageia.org/MGASA-2022-0062.html
- Import Source
- https://advisories.mageia.org/MGASA-2022-0062.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2022-0062
- Related
- Published
- 2022-02-15T20:50:31Z
- Modified
- 2022-02-28T09:35:55Z
- Summary
- Updated kernel packages fix security vulnerabilities
- Details
-
This kernel update is based on upstream 5.15.23 and fixes at least the following security issues:
A stack overflow flaw was found in the Linux kernel TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network (CVE-2022-0435).
A vulnerability was found in the Linux kernel cgroupreleaseagentwrite in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 releaseagent feature to escalate privileges and bypass the namespace isolation unexpectedly (CVE-2022-0492).
An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the ODIRECTORY flag, and tries to open a regular file, nfsatomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in the file descriptor (CVE-2022-24448).
Other fixes in this update: - enable several missed MediaTek wifi drivers (mga#29965)
For other upstream fixes, see the referenced changelogs.
- References
-
- https://advisories.mageia.org/MGASA-2022-0062.html
- https://bugs.mageia.org/show_bug.cgi?id=30030
- https://bugs.mageia.org/show_bug.cgi?id=29965
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.19
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.20
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.21
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.22
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.23
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:8 / kernel
Package
- Name
- kernel
- Purl
- pkg:rpm/mageia/kernel?distro=mageia-8
Mageia:8 / kmod-virtualbox
Package
- Name
- kmod-virtualbox
- Purl
- pkg:rpm/mageia/kmod-virtualbox?distro=mageia-8
Mageia:8 / kmod-xtables-addons
Package
- Name
- kmod-xtables-addons
- Purl
- pkg:rpm/mageia/kmod-xtables-addons?distro=mageia-8