Security Vulnerabilities fixed in kernel RHSA-2023:0399

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964) hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715 (CVE-2021-26401) kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964) hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715 (CVE-2021-26401) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): Prevent unnecessary resets - Avoid leaving shost->last_reset with stale value if EH does not run (BZ#2128337) i40e: Request to backport upstream commit 2e5a20573a92 (BZ#2129248) disable VMA-based swap-in readahead on PowerPC (BZ#2142455) Prevent unnecessary resets - Avoid leaving shost->last_reset with stale value if EH does not run (BZ#2128337) i40e: Request to backport upstream commit 2e5a20573a92 (BZ#2129248) disable VMA-based swap-in readahead on PowerPC (BZ#2142455) SolutionFor details on how to apply this update, which includes the changes described in this advisory, refer to:https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Affected Applications

kernel

CVE References

CVE-2022-2964 CVE-2021-26401 CVE-2017-5715

Other References

https://access.redhat.com/errata/RHSA-2023:0399