-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2022.5541
                    kernel security and bug fix update
                              3 November 2022

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           kernel
Publisher:         Red Hat
Operating System:  Red Hat
Resolution:        Patch/Upgrade
CVE Names:         CVE-2022-29901 CVE-2022-29900 CVE-2022-26373
                   CVE-2022-23825 CVE-2022-23816 CVE-2022-2588

Original Bulletin: 
   https://access.redhat.com/errata/RHSA-2022:7337

Comment: CVSS (Max):  7.8 CVE-2022-2588 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
         CVSS Source: Red Hat
         Calculator:  https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

=====================================================================
                   Red Hat Security Advisory

Synopsis:          Important: kernel security and bug fix update
Advisory ID:       RHSA-2022:7337-01
Product:           Red Hat Enterprise Linux
Advisory URL:      https://access.redhat.com/errata/RHSA-2022:7337
Issue date:        2022-11-02
CVE Names:         CVE-2022-2588 CVE-2022-23816 CVE-2022-23825 
                   CVE-2022-26373 CVE-2022-29900 CVE-2022-29901 
=====================================================================

1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Client (v. 7) - noarch, x86_64
Red Hat Enterprise Linux Client Optional (v. 7) - x86_64
Red Hat Enterprise Linux ComputeNode (v. 7) - noarch, x86_64
Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64
Red Hat Enterprise Linux Server (v. 7) - noarch, ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, x86_64
Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64
Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* a use-after-free in cls_route filter implementation may lead to privilege
escalation (CVE-2022-2588)

* RetBleed Arbitrary Speculative Code Execution with Return Instructions
(CVE-2022-23816, CVE-2022-29900)

* Branch Type Confusion (non-retbleed) (CVE-2022-23825)

* Intel: Post-barrier Return Stack Buffer Predictions (CVE-2022-26373)

* Intel: RetBleed Arbitrary Speculative Code Execution with Return
Instructions (CVE-2022-29901)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Bug Fix(es):

* lpfc panics in lpfc_els_free_iocb() during port recovery (BZ#1969988)

* mlx5 reports error messages during shutdown then panic with mce
(BZ#2077711)

* Kernel panic due to hard lockup caused by deadlock between tasklist_lock
and k_itimer->it_lock (BZ#2115147)

* fix excess double put in nfs_prime_dcache (BZ#2117856)

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

2090226 - CVE-2022-23816 CVE-2022-29900 hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions
2103148 - CVE-2022-29901 hw: cpu: Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions
2103153 - CVE-2022-23825 hw: cpu: AMD: Branch Type Confusion (non-retbleed)
2114849 - CVE-2022-2588 kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation
2115065 - CVE-2022-26373 hw: cpu: Intel: Post-barrier Return Stack Buffer Predictions

6. Package List:

Red Hat Enterprise Linux Client (v. 7):

Source:
kernel-3.10.0-1160.80.1.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-1160.80.1.el7.noarch.rpm
kernel-doc-3.10.0-1160.80.1.el7.noarch.rpm

x86_64:
bpftool-3.10.0-1160.80.1.el7.x86_64.rpm
bpftool-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-devel-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-headers-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-1160.80.1.el7.x86_64.rpm
perf-3.10.0-1160.80.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
python-perf-3.10.0-1160.80.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm

Red Hat Enterprise Linux Client Optional (v. 7):

x86_64:
bpftool-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-1160.80.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm

Red Hat Enterprise Linux ComputeNode (v. 7):

Source:
kernel-3.10.0-1160.80.1.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-1160.80.1.el7.noarch.rpm
kernel-doc-3.10.0-1160.80.1.el7.noarch.rpm

x86_64:
bpftool-3.10.0-1160.80.1.el7.x86_64.rpm
bpftool-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-devel-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-headers-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-1160.80.1.el7.x86_64.rpm
perf-3.10.0-1160.80.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
python-perf-3.10.0-1160.80.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm

Red Hat Enterprise Linux ComputeNode Optional (v. 7):

x86_64:
bpftool-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-1160.80.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm

Red Hat Enterprise Linux Server (v. 7):

Source:
kernel-3.10.0-1160.80.1.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-1160.80.1.el7.noarch.rpm
kernel-doc-3.10.0-1160.80.1.el7.noarch.rpm

ppc64:
bpftool-3.10.0-1160.80.1.el7.ppc64.rpm
bpftool-debuginfo-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-bootwrapper-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-debug-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-debug-debuginfo-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-debug-devel-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-debuginfo-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-debuginfo-common-ppc64-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-devel-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-headers-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-tools-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-tools-debuginfo-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-tools-libs-3.10.0-1160.80.1.el7.ppc64.rpm
perf-3.10.0-1160.80.1.el7.ppc64.rpm
perf-debuginfo-3.10.0-1160.80.1.el7.ppc64.rpm
python-perf-3.10.0-1160.80.1.el7.ppc64.rpm
python-perf-debuginfo-3.10.0-1160.80.1.el7.ppc64.rpm

ppc64le:
bpftool-3.10.0-1160.80.1.el7.ppc64le.rpm
bpftool-debuginfo-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-bootwrapper-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-debug-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-debug-debuginfo-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-devel-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-headers-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-tools-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-tools-libs-3.10.0-1160.80.1.el7.ppc64le.rpm
perf-3.10.0-1160.80.1.el7.ppc64le.rpm
perf-debuginfo-3.10.0-1160.80.1.el7.ppc64le.rpm
python-perf-3.10.0-1160.80.1.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-1160.80.1.el7.ppc64le.rpm

s390x:
bpftool-3.10.0-1160.80.1.el7.s390x.rpm
bpftool-debuginfo-3.10.0-1160.80.1.el7.s390x.rpm
kernel-3.10.0-1160.80.1.el7.s390x.rpm
kernel-debug-3.10.0-1160.80.1.el7.s390x.rpm
kernel-debug-debuginfo-3.10.0-1160.80.1.el7.s390x.rpm
kernel-debug-devel-3.10.0-1160.80.1.el7.s390x.rpm
kernel-debuginfo-3.10.0-1160.80.1.el7.s390x.rpm
kernel-debuginfo-common-s390x-3.10.0-1160.80.1.el7.s390x.rpm
kernel-devel-3.10.0-1160.80.1.el7.s390x.rpm
kernel-headers-3.10.0-1160.80.1.el7.s390x.rpm
kernel-kdump-3.10.0-1160.80.1.el7.s390x.rpm
kernel-kdump-debuginfo-3.10.0-1160.80.1.el7.s390x.rpm
kernel-kdump-devel-3.10.0-1160.80.1.el7.s390x.rpm
perf-3.10.0-1160.80.1.el7.s390x.rpm
perf-debuginfo-3.10.0-1160.80.1.el7.s390x.rpm
python-perf-3.10.0-1160.80.1.el7.s390x.rpm
python-perf-debuginfo-3.10.0-1160.80.1.el7.s390x.rpm

x86_64:
bpftool-3.10.0-1160.80.1.el7.x86_64.rpm
bpftool-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-devel-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-headers-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-1160.80.1.el7.x86_64.rpm
perf-3.10.0-1160.80.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
python-perf-3.10.0-1160.80.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm

Red Hat Enterprise Linux Server Optional (v. 7):

ppc64:
bpftool-debuginfo-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-debug-debuginfo-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-debuginfo-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-debuginfo-common-ppc64-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-tools-debuginfo-3.10.0-1160.80.1.el7.ppc64.rpm
kernel-tools-libs-devel-3.10.0-1160.80.1.el7.ppc64.rpm
perf-debuginfo-3.10.0-1160.80.1.el7.ppc64.rpm
python-perf-debuginfo-3.10.0-1160.80.1.el7.ppc64.rpm

ppc64le:
bpftool-debuginfo-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-debug-debuginfo-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-debug-devel-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-debuginfo-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-debuginfo-common-ppc64le-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-tools-debuginfo-3.10.0-1160.80.1.el7.ppc64le.rpm
kernel-tools-libs-devel-3.10.0-1160.80.1.el7.ppc64le.rpm
perf-debuginfo-3.10.0-1160.80.1.el7.ppc64le.rpm
python-perf-debuginfo-3.10.0-1160.80.1.el7.ppc64le.rpm

x86_64:
bpftool-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-1160.80.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm

Red Hat Enterprise Linux Workstation (v. 7):

Source:
kernel-3.10.0-1160.80.1.el7.src.rpm

noarch:
kernel-abi-whitelists-3.10.0-1160.80.1.el7.noarch.rpm
kernel-doc-3.10.0-1160.80.1.el7.noarch.rpm

x86_64:
bpftool-3.10.0-1160.80.1.el7.x86_64.rpm
bpftool-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-devel-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-headers-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-1160.80.1.el7.x86_64.rpm
perf-3.10.0-1160.80.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
python-perf-3.10.0-1160.80.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm

Red Hat Enterprise Linux Workstation Optional (v. 7):

x86_64:
bpftool-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debug-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-debuginfo-common-x86_64-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-1160.80.1.el7.x86_64.rpm
perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm
python-perf-debuginfo-3.10.0-1160.80.1.el7.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2022-2588
https://access.redhat.com/security/cve/CVE-2022-23816
https://access.redhat.com/security/cve/CVE-2022-23825
https://access.redhat.com/security/cve/CVE-2022-26373
https://access.redhat.com/security/cve/CVE-2022-29900
https://access.redhat.com/security/cve/CVE-2022-29901
https://access.redhat.com/security/updates/classification/#important
https://access.redhat.com/solutions/6971358

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2022 Red Hat, Inc.
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=QW8W
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        https://www.auscert.org.au/bulletins/

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: https://auscert.org.au/gpg-key/
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=YUbv
-----END PGP SIGNATURE-----