RHSA-2022:6741

HIGH7.4

Red Hat Security Advisory: kernel security and bug fix update

Published Sep 28, 2022

Modified 6 months ago

Fix available

Details

Details:

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: race condition in perf_event_open leads to privilege escalation (CVE-2022-1729)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Posix ACL object is leaked in several places upon setattr and fsetxattr syscalls (BZ#2106586)
netfilter: backports from upstream (BZ#2120634)

Affected Packages(22 packages)

bpftool

Red Hat rhel_aus 7.7 serverRed Hat rhel_e4s 7.7 serverRed Hat rhel_tus 7.7 server

Fixed in:

0:3.10.0-1062.70.1.el7

bpftool-debuginfo

Red Hat rhel_aus 7.7 serverRed Hat rhel_e4s 7.7 serverRed Hat rhel_tus 7.7 server

Fixed in:

0:3.10.0-1062.70.1.el7

kernel

Red Hat rhel_aus 7.7 serverRed Hat rhel_e4s 7.7 serverRed Hat rhel_tus 7.7 server

Fixed in:

0:3.10.0-1062.70.1.el7

kernel-abi-whitelists

Red Hat rhel_aus 7.7 serverRed Hat rhel_e4s 7.7 serverRed Hat rhel_tus 7.7 server

Fixed in:

0:3.10.0-1062.70.1.el7

kernel-debug

Red Hat rhel_aus 7.7 serverRed Hat rhel_e4s 7.7 serverRed Hat rhel_tus 7.7 server

Fixed in:

0:3.10.0-1062.70.1.el7

kernel-debug-debuginfo

Red Hat rhel_aus 7.7 serverRed Hat rhel_e4s 7.7 serverRed Hat rhel_tus 7.7 server

Fixed in:

0:3.10.0-1062.70.1.el7

kernel-debug-devel

Red Hat rhel_aus 7.7 serverRed Hat rhel_e4s 7.7 serverRed Hat rhel_tus 7.7 server

Fixed in:

0:3.10.0-1062.70.1.el7

kernel-debuginfo

Red Hat rhel_aus 7.7 serverRed Hat rhel_e4s 7.7 serverRed Hat rhel_tus 7.7 server

Fixed in:

0:3.10.0-1062.70.1.el7

kernel-debuginfo-common-x86_64

Red Hat rhel_aus 7.7 serverRed Hat rhel_e4s 7.7 serverRed Hat rhel_tus 7.7 server

Fixed in:

0:3.10.0-1062.70.1.el7

kernel-devel

Red Hat rhel_aus 7.7 serverRed Hat rhel_e4s 7.7 serverRed Hat rhel_tus 7.7 server

Fixed in:

0:3.10.0-1062.70.1.el7

References

https://access.redhat.com/errata/RHSA-2022:6741

https://access.redhat.com/security/updates/classification/#important

https://bugzilla.redhat.com/show_bug.cgi?id=2086753

https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6741.json

CVSS Analysis

CVSS v3.1

7.4

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Upstream

Ecosystems

Red Hat rhel_aus 7.7 server Red Hat rhel_e4s 7.7 server Red Hat rhel_tus 7.7 server

Timeline

PublishedSep 28, 2022

ModifiedNov 21, 2025

RHSA-2022:6741 | Mondoo Vulnerability Intelligence