VAR-202207-1358
Vulnerability from variot - Updated: 2026-04-10 22:16When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds. ========================================================================== Ubuntu Security Notice USN-5650-1 September 30, 2022
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Summary:
Several security issues were fixed in the Linux kernel.
Software Description: - linux: Linux kernel - linux-aws: Linux kernel for Amazon Web Services (AWS) systems - linux-kvm: Linux kernel for cloud environments - linux-lts-xenial: Linux hardware enablement kernel from Xenial for Trusty
Details:
It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33655)
It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33656)
Christian Brauner discovered that the XFS file system implementation in the Linux kernel did not properly handle setgid file creation. A local attacker could use this to gain elevated privileges. (CVE-2021-4037)
It was discovered that the ext4 file system implementation in the Linux kernel did not properly initialize memory in some situations. A privileged local attacker could use this to expose sensitive information (kernel memory). (CVE-2022-0850)
Duoming Zhou discovered that the AX.25 amateur radio protocol implementation in the Linux kernel did not handle detach events properly in some situations. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-1199)
Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel during device detach operations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1204)
Norbert Slusarek discovered that a race condition existed in the perf subsystem in the Linux kernel, resulting in a use-after-free vulnerability. A privileged local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-1729)
It was discovered that the Packet network protocol implementation in the Linux kernel contained an out-of-bounds access. A remote attacker could use this to expose sensitive information (kernel memory). (CVE-2022-20368)
It was discovered that the Open vSwitch implementation in the Linux kernel contained an out of bounds write vulnerability in certain situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-2639)
Jann Horn discovered that the ASIX AX88179/178A USB Ethernet driver in the Linux kernel contained multiple out-of-bounds vulnerabilities. A local attacker with physical access could plug in a specially crafted USB device to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-2964)
Hao Sun and Jiacheng Xu discovered that the NILFS file system implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-2978)
Abhishek Shah discovered a race condition in the PF_KEYv2 implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2022-3028)
It was discovered that the Journaled File System (JFS) in the Linux kernel contained a null pointer dereference in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3202)
Domingo Dirutigliano and Nicola Guerrera discovered that the netfilter subsystem in the Linux kernel did not properly handle rules that truncated packets below the packet header size. When such rules are in place, a remote attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-36946)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04 ESM: linux-image-4.4.0-1114-kvm 4.4.0-1114.124 linux-image-4.4.0-1151-aws 4.4.0-1151.166 linux-image-4.4.0-234-generic 4.4.0-234.268 linux-image-4.4.0-234-lowlatency 4.4.0-234.268 linux-image-aws 4.4.0.1151.155 linux-image-generic 4.4.0.234.240 linux-image-kvm 4.4.0.1114.111 linux-image-lowlatency 4.4.0.234.240 linux-image-virtual 4.4.0.234.240
Ubuntu 14.04 ESM: linux-image-4.4.0-1113-aws 4.4.0-1113.119 linux-image-4.4.0-234-generic 4.4.0-234.268~14.04.1 linux-image-4.4.0-234-lowlatency 4.4.0-234.268~14.04.1 linux-image-aws 4.4.0.1113.110 linux-image-generic-lts-xenial 4.4.0.234.203 linux-image-lowlatency-lts-xenial 4.4.0.234.203 linux-image-virtual-lts-xenial 4.4.0.234.203
After a standard system update you need to reboot your computer to make all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.
References: https://ubuntu.com/security/notices/USN-5650-1 CVE-2021-33655, CVE-2021-33656, CVE-2021-4037, CVE-2022-0850, CVE-2022-1199, CVE-2022-1204, CVE-2022-1729, CVE-2022-20368, CVE-2022-2639, CVE-2022-2964, CVE-2022-2978, CVE-2022-3028, CVE-2022-3202, CVE-2022-36946 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
====================================================================
Red Hat Security Advisory
Synopsis: Important: kernel-rt security and bug fix update Advisory ID: RHSA-2023:2736-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:2736 Issue date: 2023-05-16 CVE Names: CVE-2021-26341 CVE-2021-33655 CVE-2021-33656 CVE-2022-1462 CVE-2022-1679 CVE-2022-1789 CVE-2022-2196 CVE-2022-2663 CVE-2022-3028 CVE-2022-3239 CVE-2022-3522 CVE-2022-3524 CVE-2022-3564 CVE-2022-3566 CVE-2022-3567 CVE-2022-3619 CVE-2022-3623 CVE-2022-3625 CVE-2022-3628 CVE-2022-3707 CVE-2022-4129 CVE-2022-20141 CVE-2022-25265 CVE-2022-30594 CVE-2022-39188 CVE-2022-39189 CVE-2022-41218 CVE-2022-41674 CVE-2022-42703 CVE-2022-42720 CVE-2022-42721 CVE-2022-42722 CVE-2022-43750 CVE-2022-47929 CVE-2023-0394 CVE-2023-0461 CVE-2023-1195 CVE-2023-1582 CVE-2023-23454 ==================================================================== 1. Summary:
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- Relevant releases/architectures:
Red Hat Enterprise Linux NFV (v. 8) - x86_64 Red Hat Enterprise Linux RT (v. 8) - x86_64
- Description:
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
-
use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)
-
net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)
-
hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch (CVE-2021-26341)
-
malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory (CVE-2021-33655)
-
when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds (CVE-2021-33656)
-
possible race condition in drivers/tty/tty_buffers.c (CVE-2022-1462)
-
use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges (CVE-2022-1679)
-
KVM: NULL pointer dereference in kvm_mmu_invpcid_gva (CVE-2022-1789)
-
KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks (CVE-2022-2196)
-
netfilter: nf_conntrack_irc message handling issue (CVE-2022-2663)
-
race condition in xfrm_probe_algs can lead to OOB read/write (CVE-2022-3028)
-
media: em28xx: initialize refcount before kref_get (CVE-2022-3239)
-
race condition in hugetlb_no_page() in mm/hugetlb.c (CVE-2022-3522)
-
memory leak in ipv6_renew_options() (CVE-2022-3524)
-
data races around icsk->icsk_af_ops in do_ipv6_setsockopt (CVE-2022-3566)
-
data races around sk->sk_prot (CVE-2022-3567)
-
memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (CVE-2022-3619)
-
denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry (CVE-2022-3623)
-
use-after-free after failed devlink reload in devlink_param_get (CVE-2022-3625)
-
USB-accessible buffer overflow in brcmfmac (CVE-2022-3628)
-
Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed (CVE-2022-3707)
-
l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference (CVE-2022-4129)
-
igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets (CVE-2022-20141)
-
Executable Space Protection Bypass (CVE-2022-25265)
-
Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)
-
unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry (CVE-2022-39188)
-
TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning (CVE-2022-39189)
-
Report vmalloc UAF in dvb-core/dmxdev (CVE-2022-41218)
-
u8 overflow problem in cfg80211_update_notlisted_nontrans() (CVE-2022-41674)
-
use-after-free related to leaf anon_vma double reuse (CVE-2022-42703)
-
use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720)
-
BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (CVE-2022-42721)
-
Denial of service in beacon protection for P2P-device (CVE-2022-42722)
-
memory corruption in usbmon driver (CVE-2022-43750)
-
NULL pointer dereference in traffic control subsystem (CVE-2022-47929)
-
NULL pointer dereference in rawv6_push_pending_frames (CVE-2023-0394)
-
use-after-free caused by invalid pointer hostname in fs/cifs/connect.c (CVE-2023-1195)
-
Soft lockup occurred during __page_mapcount (CVE-2023-1582)
-
slab-out-of-bounds read vulnerabilities in cbq_classify (CVE-2023-23454)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section.
- Solution:
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
- Bugs fixed (https://bugzilla.redhat.com/):
2055499 - CVE-2022-25265 kernel: Executable Space Protection Bypass 2061703 - CVE-2021-26341 hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch 2078466 - CVE-2022-1462 kernel: possible race condition in drivers/tty/tty_buffers.c 2084125 - CVE-2022-1679 kernel: use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges 2085300 - CVE-2022-30594 kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option 2090723 - CVE-2022-1789 kernel: KVM: NULL pointer dereference in kvm_mmu_invpcid_gva 2108691 - CVE-2021-33655 kernel: malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory 2108696 - CVE-2021-33656 kernel: when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds 2114937 - CVE-2022-20141 kernel: igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets 2122228 - CVE-2022-3028 kernel: race condition in xfrm_probe_algs can lead to OOB read/write 2122960 - CVE-2022-41218 kernel: Report vmalloc UAF in dvb-core/dmxdev 2123056 - CVE-2022-2663 kernel: netfilter: nf_conntrack_irc message handling issue 2124788 - CVE-2022-39189 kernel: TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning 2127985 - CVE-2022-3239 kernel: media: em28xx: initialize refcount before kref_get 2130141 - CVE-2022-39188 kernel: unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry 2133483 - CVE-2022-42703 kernel: use-after-free related to leaf anon_vma double reuse 2134377 - CVE-2022-41674 kernel: u8 overflow problem in cfg80211_update_notlisted_nontrans() 2134451 - CVE-2022-42720 kernel: use-after-free in bss_ref_get in net/wireless/scan.c 2134506 - CVE-2022-42721 kernel: BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c 2134517 - CVE-2022-42722 kernel: Denial of service in beacon protection for P2P-device 2134528 - CVE-2022-4129 kernel: l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference 2137979 - CVE-2022-3707 kernel: Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed 2143893 - CVE-2022-3566 kernel: data races around icsk->icsk_af_ops in do_ipv6_setsockopt 2143943 - CVE-2022-3567 kernel: data races around sk->sk_prot 2144720 - CVE-2022-3625 kernel: use-after-free after failed devlink reload in devlink_param_get 2150947 - CVE-2022-3524 kernel: memory leak in ipv6_renew_options() 2150960 - CVE-2022-3628 kernel: USB-accessible buffer overflow in brcmfmac 2150979 - CVE-2022-3522 kernel: race condition in hugetlb_no_page() in mm/hugetlb.c 2150999 - CVE-2022-3564 kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c 2151270 - CVE-2022-43750 kernel: memory corruption in usbmon driver 2154171 - CVE-2023-1195 kernel: use-after-free caused by invalid pointer hostname in fs/cifs/connect.c 2154235 - CVE-2022-3619 kernel: memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c 2160023 - CVE-2022-2196 kernel: KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks 2162120 - CVE-2023-0394 kernel: NULL pointer dereference in rawv6_push_pending_frames 2165721 - CVE-2022-3623 kernel: denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry 2168246 - CVE-2022-47929 kernel: NULL pointer dereference in traffic control subsystem 2168297 - CVE-2023-23454 kernel: slab-out-of-bounds read vulnerabilities in cbq_classify 2176192 - CVE-2023-0461 kernel: net/ulp: use-after-free in listening ULP sockets 2180936 - CVE-2023-1582 kernel: Soft lockup occurred during __page_mapcount
- Package List:
Red Hat Enterprise Linux NFV (v. 8):
Source: kernel-rt-4.18.0-477.10.1.rt7.274.el8_8.src.rpm
x86_64: kernel-rt-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-core-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debug-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debug-core-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debug-debuginfo-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debug-devel-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debug-kvm-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debug-modules-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debug-modules-extra-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debuginfo-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debuginfo-common-x86_64-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-devel-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-kvm-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-modules-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-modules-extra-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm
Red Hat Enterprise Linux RT (v. 8):
Source: kernel-rt-4.18.0-477.10.1.rt7.274.el8_8.src.rpm
x86_64: kernel-rt-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-core-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debug-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debug-core-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debug-debuginfo-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debug-devel-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debug-modules-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debug-modules-extra-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debuginfo-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-debuginfo-common-x86_64-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-devel-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-modules-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm kernel-rt-modules-extra-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIVAwUBZGNu2tzjgjWX9erEAQh93A/9F2L57OgQtbqD3gy1RyYVyiSnovPSukbF MXVqHkJHDfKqynLRrFqm8FztET3BNsDC+tTmyMSDHxiZo4IF2x0ldkbi1sJ9YTx/ RdnlHnIFcmv7ubu628ATv/LvhOwCzVVw52pAJHJFQPiPEa29hGDC8aBk/YQBigXH PqYyMMfeEocvsFkMjf22FZ4t2CN6ktUQh38goKgYbN/wqYhjwHsXtlYTw51SW5+v TXaLFtH7VrARlC2YtzTrQZ+mvnLdutapSZJudb9lPPDTEeQGXxaqnzjgjPEUYl3y wM480wj5NxB+taVlnZGJh1Uwy75sISoWL/b7wyQH8OHqOyZ3pY8dcYE2scbkDlPx 1hA8PqpwHSyp7nFpPBSfYXtgrAMeLSsYRVyptTLwgRr28L29mFnfjd4PE0oL+hZV igKd6NbyVWbJ0Z7JnI305ghqp/SMr6t5nX5TRWpgOysPbWQH+mwnlf+xa72hyaCb cgmeDa1s28jCZeIREQoW8uVk4HGKhyqr/EQ66VCXaXJhF8m7qXoVPMCpE7gr0GPA WQ5N5haLNJQiPKFfaucuVGIS9syifMHs9nTeFLfCBXjKca4xBi/pWysj+XntceLH y+SBHI/AQPzBbN+uMCezkfvndP+Rbo/dTgAUwlVe61wwNmZUBBSP1FwyJUoeH2AH pumjkxlxpLs=ytDn -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce . Description:
Red Hat Advanced Cluster Management for Kubernetes 2.5.9 images
Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in.
This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which fix several bugs. Bugs fixed (https://bugzilla.redhat.com/):
2208376 - CVE-2023-32314 vm2: Sandbox Escape 2208377 - CVE-2023-32313 vm2: Inspect Manipulation
- Description:
Logging Subsystem 5.7.2 - Red Hat OpenShift
Security Fix(es):
-
net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)
-
rubygem-rack: denial of service in header parsing (CVE-2023-27539)
-
rubygem-activesupport: Possible XSS in SafeBuffer#bytesplice (CVE-2023-28120)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bugs fixed (https://bugzilla.redhat.com/):
2178358 - CVE-2022-41723 net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 2179637 - CVE-2023-28120 rubygem-activesupport: Possible XSS in SafeBuffer#bytesplice 2179649 - CVE-2023-27539 rubygem-rack: denial of service in header parsing
- JIRA issues fixed (https://issues.redhat.com/):
LOG-3314 - [fluentd] The passphrase can not be enabled when forwarding logs to Kafka LOG-3316 - openshift-logging namespace can not be deleted directly when use lokistack as default store. LOG-3330 - run.sh shows incorrect chunk_limit_size if changed. LOG-3445 - [vector to loki] validation is not disabled when tls.insecureSkipVerify=true LOG-3749 - Unability to configure nodePlacement and toleration for logging-view-plugin LOG-3784 - [fluentd http] the defaut value HTTP content type application/x-ndjson is unsupported on datadog LOG-3827 - [fluentd http] The passphase isn't generated in fluent.conf LOG-3878 - [vector] PHP multiline errors are collected line by line when detectMultilineErrors is enabled. LOG-3945 - [Vector] Collector pods in CrashLoopBackOff when ClusterLogForwarder pipeline has space in between the pipeline name. LOG-3997 - Add http to log_forwarder_output_info metrics LOG-4011 - [Vector] Collector not complying with the custom tlsSecurityProfile configuration. LOG-4019 - [release-5.7] fluentd multiline exception plugin fails to detect JS client exception LOG-4049 - [release-5.7] User can list labels and label values for all user workload namespaces via Loki Label APIs LOG-4052 - [release-5.7] Fix Loki timeouts querying logs from OCP Console LOG-4098 - [release-5.7] No log_forwarder_output_info for splunk and google logging LOG-4151 - Fluentd fix missing nil check for rotated_tw in update_watcher LOG-4163 - [release-5.7] TLS configuration for multiple Kafka brokers is not created in Vector LOG-4185 - Resources, tolerations and nodeSelector for the collector are missing LOG-4218 - Vector fails to run when configuring syslog forwarding for audit log LOG-4219 - Vector handles journal log as container log when enabling syslog forwarding. It breaks the compatibility with Fluentd LOG-4220 - [RHOCP4.11] Logs of POD which doesn't have labels specified by structuredTypeKey are parsed to JSON, and forwarded to app-xxxxxx LOG-4221 - [release-5.7] Fluentd wrongly closes a log file due to hash collision
6
Show details on source website{
"affected_products": {
"_id": null,
"data": [
{
"_id": null,
"model": "openeuler",
"scope": "eq",
"trust": 1.0,
"vendor": "openatom",
"version": "20.03"
},
{
"_id": null,
"model": "linux",
"scope": "eq",
"trust": 1.0,
"vendor": "debian",
"version": "10.0"
},
{
"_id": null,
"model": "kernel",
"scope": "lt",
"trust": 1.0,
"vendor": "linux",
"version": "5.10.127"
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2021-33656"
}
]
},
"credits": {
"_id": null,
"data": "Ubuntu",
"sources": [
{
"db": "PACKETSTORM",
"id": "168221"
},
{
"db": "PACKETSTORM",
"id": "168203"
},
{
"db": "PACKETSTORM",
"id": "168238"
},
{
"db": "PACKETSTORM",
"id": "168253"
},
{
"db": "PACKETSTORM",
"id": "168251"
},
{
"db": "PACKETSTORM",
"id": "168589"
}
],
"trust": 0.6
},
"cve": "CVE-2021-33656",
"cvss": {
"_id": null,
"data": [
{
"cvssV2": [],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 0.9,
"id": "CVE-2021-33656",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2021-33656",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-202207-1508",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202207-1508"
},
{
"db": "NVD",
"id": "CVE-2021-33656"
}
]
},
"description": {
"_id": null,
"data": "When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds. ==========================================================================\nUbuntu Security Notice USN-5650-1\nSeptember 30, 2022\n\nlinux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 16.04 ESM\n- Ubuntu 14.04 ESM\n\nSummary:\n\nSeveral security issues were fixed in the Linux kernel. \n\nSoftware Description:\n- linux: Linux kernel\n- linux-aws: Linux kernel for Amazon Web Services (AWS) systems\n- linux-kvm: Linux kernel for cloud environments\n- linux-lts-xenial: Linux hardware enablement kernel from Xenial for Trusty\n\nDetails:\n\nIt was discovered that the framebuffer driver on the Linux kernel did not\nverify size limits when changing font or screen size, leading to an out-of-\nbounds write. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2021-33655)\n\nIt was discovered that the virtual terminal driver in the Linux kernel did\nnot properly handle VGA console font changes, leading to an out-of-bounds\nwrite. A local attacker could use this to cause a denial of service (system\ncrash) or possibly execute arbitrary code. (CVE-2021-33656)\n\nChristian Brauner discovered that the XFS file system implementation in the\nLinux kernel did not properly handle setgid file creation. A local attacker\ncould use this to gain elevated privileges. (CVE-2021-4037)\n\nIt was discovered that the ext4 file system implementation in the Linux\nkernel did not properly initialize memory in some situations. A privileged\nlocal attacker could use this to expose sensitive information (kernel\nmemory). (CVE-2022-0850)\n\nDuoming Zhou discovered that the AX.25 amateur radio protocol\nimplementation in the Linux kernel did not handle detach events properly in\nsome situations. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2022-1199)\n\nDuoming Zhou discovered race conditions in the AX.25 amateur radio protocol\nimplementation in the Linux kernel during device detach operations. A local\nattacker could possibly use this to cause a denial of service (system\ncrash). (CVE-2022-1204)\n\nNorbert Slusarek discovered that a race condition existed in the perf\nsubsystem in the Linux kernel, resulting in a use-after-free vulnerability. \nA privileged local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2022-1729)\n\nIt was discovered that the Packet network protocol implementation in the\nLinux kernel contained an out-of-bounds access. A remote attacker could use\nthis to expose sensitive information (kernel memory). (CVE-2022-20368)\n\nIt was discovered that the Open vSwitch implementation in the Linux kernel\ncontained an out of bounds write vulnerability in certain situations. A\nlocal attacker could use this to cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2022-2639)\n\nJann Horn discovered that the ASIX AX88179/178A USB Ethernet driver in the\nLinux kernel contained multiple out-of-bounds vulnerabilities. A local\nattacker with physical access could plug in a specially crafted USB device\nto cause a denial of service (system crash) or possibly execute arbitrary\ncode. (CVE-2022-2964)\n\nHao Sun and Jiacheng Xu discovered that the NILFS file system\nimplementation in the Linux kernel contained a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2022-2978)\n\nAbhishek Shah discovered a race condition in the PF_KEYv2 implementation in\nthe Linux kernel. A local attacker could use this to cause a denial of\nservice (system crash) or possibly expose sensitive information (kernel\nmemory). (CVE-2022-3028)\n\nIt was discovered that the Journaled File System (JFS) in the Linux kernel\ncontained a null pointer dereference in some situations. A local attacker\ncould use this to cause a denial of service (system crash). (CVE-2022-3202)\n\nDomingo Dirutigliano and Nicola Guerrera discovered that the netfilter\nsubsystem in the Linux kernel did not properly handle rules that truncated\npackets below the packet header size. When such rules are in place, a\nremote attacker could possibly use this to cause a denial of service\n(system crash). (CVE-2022-36946)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 16.04 ESM:\n linux-image-4.4.0-1114-kvm 4.4.0-1114.124\n linux-image-4.4.0-1151-aws 4.4.0-1151.166\n linux-image-4.4.0-234-generic 4.4.0-234.268\n linux-image-4.4.0-234-lowlatency 4.4.0-234.268\n linux-image-aws 4.4.0.1151.155\n linux-image-generic 4.4.0.234.240\n linux-image-kvm 4.4.0.1114.111\n linux-image-lowlatency 4.4.0.234.240\n linux-image-virtual 4.4.0.234.240\n\nUbuntu 14.04 ESM:\n linux-image-4.4.0-1113-aws 4.4.0-1113.119\n linux-image-4.4.0-234-generic 4.4.0-234.268~14.04.1\n linux-image-4.4.0-234-lowlatency 4.4.0-234.268~14.04.1\n linux-image-aws 4.4.0.1113.110\n linux-image-generic-lts-xenial 4.4.0.234.203\n linux-image-lowlatency-lts-xenial 4.4.0.234.203\n linux-image-virtual-lts-xenial 4.4.0.234.203\n\nAfter a standard system update you need to reboot your computer to make\nall the necessary changes. \n\nATTENTION: Due to an unavoidable ABI change the kernel updates have\nbeen given a new version number, which requires you to recompile and\nreinstall all third party kernel modules you might have installed. \nUnless you manually uninstalled the standard kernel metapackages\n(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,\nlinux-powerpc), a standard system upgrade will automatically perform\nthis as well. \n\nReferences:\n https://ubuntu.com/security/notices/USN-5650-1\n CVE-2021-33655, CVE-2021-33656, CVE-2021-4037, CVE-2022-0850,\n CVE-2022-1199, CVE-2022-1204, CVE-2022-1729, CVE-2022-20368,\n CVE-2022-2639, CVE-2022-2964, CVE-2022-2978, CVE-2022-3028,\n CVE-2022-3202, CVE-2022-36946\n. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n==================================================================== \nRed Hat Security Advisory\n\nSynopsis: Important: kernel-rt security and bug fix update\nAdvisory ID: RHSA-2023:2736-01\nProduct: Red Hat Enterprise Linux\nAdvisory URL: https://access.redhat.com/errata/RHSA-2023:2736\nIssue date: 2023-05-16\nCVE Names: CVE-2021-26341 CVE-2021-33655 CVE-2021-33656\n CVE-2022-1462 CVE-2022-1679 CVE-2022-1789\n CVE-2022-2196 CVE-2022-2663 CVE-2022-3028\n CVE-2022-3239 CVE-2022-3522 CVE-2022-3524\n CVE-2022-3564 CVE-2022-3566 CVE-2022-3567\n CVE-2022-3619 CVE-2022-3623 CVE-2022-3625\n CVE-2022-3628 CVE-2022-3707 CVE-2022-4129\n CVE-2022-20141 CVE-2022-25265 CVE-2022-30594\n CVE-2022-39188 CVE-2022-39189 CVE-2022-41218\n CVE-2022-41674 CVE-2022-42703 CVE-2022-42720\n CVE-2022-42721 CVE-2022-42722 CVE-2022-43750\n CVE-2022-47929 CVE-2023-0394 CVE-2023-0461\n CVE-2023-1195 CVE-2023-1582 CVE-2023-23454\n====================================================================\n1. Summary:\n\nAn update for kernel-rt is now available for Red Hat Enterprise Linux 8. \n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux NFV (v. 8) - x86_64\nRed Hat Enterprise Linux RT (v. 8) - x86_64\n\n3. Description:\n\nThe kernel-rt packages provide the Real Time Linux Kernel, which enables\nfine-tuning for systems with extremely high determinism requirements. \n\nSecurity Fix(es):\n\n* use-after-free caused by l2cap_reassemble_sdu() in\nnet/bluetooth/l2cap_core.c (CVE-2022-3564)\n\n* net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)\n\n* hw: cpu: AMD CPUs may transiently execute beyond unconditional direct\nbranch (CVE-2021-26341)\n\n* malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory\n(CVE-2021-33655)\n\n* when setting font with malicious data by ioctl PIO_FONT, kernel will\nwrite memory out of bounds (CVE-2021-33656)\n\n* possible race condition in drivers/tty/tty_buffers.c (CVE-2022-1462)\n\n* use-after-free in ath9k_htc_probe_device() could cause an escalation of\nprivileges (CVE-2022-1679)\n\n* KVM: NULL pointer dereference in kvm_mmu_invpcid_gva (CVE-2022-1789)\n\n* KVM: nVMX: missing IBPB when exiting from nested guest can lead to\nSpectre v2 attacks (CVE-2022-2196)\n\n* netfilter: nf_conntrack_irc message handling issue (CVE-2022-2663)\n\n* race condition in xfrm_probe_algs can lead to OOB read/write\n(CVE-2022-3028)\n\n* media: em28xx: initialize refcount before kref_get (CVE-2022-3239)\n\n* race condition in hugetlb_no_page() in mm/hugetlb.c (CVE-2022-3522)\n\n* memory leak in ipv6_renew_options() (CVE-2022-3524)\n\n* data races around icsk-\u003eicsk_af_ops in do_ipv6_setsockopt (CVE-2022-3566)\n\n* data races around sk-\u003esk_prot (CVE-2022-3567)\n\n* memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c\n(CVE-2022-3619)\n\n* denial of service in follow_page_pte in mm/gup.c due to poisoned pte\nentry (CVE-2022-3623)\n\n* use-after-free after failed devlink reload in devlink_param_get\n(CVE-2022-3625)\n\n* USB-accessible buffer overflow in brcmfmac (CVE-2022-3628)\n\n* Double-free in split_2MB_gtt_entry when function\nintel_gvt_dma_map_guest_page failed (CVE-2022-3707)\n\n* l2tp: missing lock when clearing sk_user_data can lead to NULL pointer\ndereference (CVE-2022-4129)\n\n* igmp: use-after-free in ip_check_mc_rcu when opening and closing inet\nsockets (CVE-2022-20141)\n\n* Executable Space Protection Bypass (CVE-2022-25265)\n\n* Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP\noption (CVE-2022-30594)\n\n* unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to\nstale TLB entry (CVE-2022-39188)\n\n* TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading\nto guest malfunctioning (CVE-2022-39189)\n\n* Report vmalloc UAF in dvb-core/dmxdev (CVE-2022-41218)\n\n* u8 overflow problem in cfg80211_update_notlisted_nontrans()\n(CVE-2022-41674)\n\n* use-after-free related to leaf anon_vma double reuse (CVE-2022-42703)\n\n* use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720)\n\n* BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c\n(CVE-2022-42721)\n\n* Denial of service in beacon protection for P2P-device (CVE-2022-42722)\n\n* memory corruption in usbmon driver (CVE-2022-43750)\n\n* NULL pointer dereference in traffic control subsystem (CVE-2022-47929)\n\n* NULL pointer dereference in rawv6_push_pending_frames (CVE-2023-0394)\n\n* use-after-free caused by invalid pointer hostname in fs/cifs/connect.c\n(CVE-2023-1195)\n\n* Soft lockup occurred during __page_mapcount (CVE-2023-1582)\n\n* slab-out-of-bounds read vulnerabilities in cbq_classify (CVE-2023-23454)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. \n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat\nEnterprise Linux 8.8 Release Notes linked from the References section. \n\n4. Solution:\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied. \n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258\n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n2055499 - CVE-2022-25265 kernel: Executable Space Protection Bypass\n2061703 - CVE-2021-26341 hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch\n2078466 - CVE-2022-1462 kernel: possible race condition in drivers/tty/tty_buffers.c\n2084125 - CVE-2022-1679 kernel: use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges\n2085300 - CVE-2022-30594 kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option\n2090723 - CVE-2022-1789 kernel: KVM: NULL pointer dereference in kvm_mmu_invpcid_gva\n2108691 - CVE-2021-33655 kernel: malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory\n2108696 - CVE-2021-33656 kernel: when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds\n2114937 - CVE-2022-20141 kernel: igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets\n2122228 - CVE-2022-3028 kernel: race condition in xfrm_probe_algs can lead to OOB read/write\n2122960 - CVE-2022-41218 kernel: Report vmalloc UAF in dvb-core/dmxdev\n2123056 - CVE-2022-2663 kernel: netfilter: nf_conntrack_irc message handling issue\n2124788 - CVE-2022-39189 kernel: TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning\n2127985 - CVE-2022-3239 kernel: media: em28xx: initialize refcount before kref_get\n2130141 - CVE-2022-39188 kernel: unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry\n2133483 - CVE-2022-42703 kernel: use-after-free related to leaf anon_vma double reuse\n2134377 - CVE-2022-41674 kernel: u8 overflow problem in cfg80211_update_notlisted_nontrans()\n2134451 - CVE-2022-42720 kernel: use-after-free in bss_ref_get in net/wireless/scan.c\n2134506 - CVE-2022-42721 kernel: BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c\n2134517 - CVE-2022-42722 kernel: Denial of service in beacon protection for P2P-device\n2134528 - CVE-2022-4129 kernel: l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference\n2137979 - CVE-2022-3707 kernel: Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed\n2143893 - CVE-2022-3566 kernel: data races around icsk-\u003eicsk_af_ops in do_ipv6_setsockopt\n2143943 - CVE-2022-3567 kernel: data races around sk-\u003esk_prot\n2144720 - CVE-2022-3625 kernel: use-after-free after failed devlink reload in devlink_param_get\n2150947 - CVE-2022-3524 kernel: memory leak in ipv6_renew_options()\n2150960 - CVE-2022-3628 kernel: USB-accessible buffer overflow in brcmfmac\n2150979 - CVE-2022-3522 kernel: race condition in hugetlb_no_page() in mm/hugetlb.c\n2150999 - CVE-2022-3564 kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c\n2151270 - CVE-2022-43750 kernel: memory corruption in usbmon driver\n2154171 - CVE-2023-1195 kernel: use-after-free caused by invalid pointer hostname in fs/cifs/connect.c\n2154235 - CVE-2022-3619 kernel: memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c\n2160023 - CVE-2022-2196 kernel: KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks\n2162120 - CVE-2023-0394 kernel: NULL pointer dereference in rawv6_push_pending_frames\n2165721 - CVE-2022-3623 kernel: denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry\n2168246 - CVE-2022-47929 kernel: NULL pointer dereference in traffic control subsystem\n2168297 - CVE-2023-23454 kernel: slab-out-of-bounds read vulnerabilities in cbq_classify\n2176192 - CVE-2023-0461 kernel: net/ulp: use-after-free in listening ULP sockets\n2180936 - CVE-2023-1582 kernel: Soft lockup occurred during __page_mapcount\n\n6. Package List:\n\nRed Hat Enterprise Linux NFV (v. 8):\n\nSource:\nkernel-rt-4.18.0-477.10.1.rt7.274.el8_8.src.rpm\n\nx86_64:\nkernel-rt-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-core-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debug-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debug-core-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debug-debuginfo-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debug-devel-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debug-kvm-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debug-modules-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debug-modules-extra-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debuginfo-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debuginfo-common-x86_64-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-devel-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-kvm-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-modules-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-modules-extra-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\n\nRed Hat Enterprise Linux RT (v. 8):\n\nSource:\nkernel-rt-4.18.0-477.10.1.rt7.274.el8_8.src.rpm\n\nx86_64:\nkernel-rt-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-core-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debug-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debug-core-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debug-debuginfo-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debug-devel-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debug-modules-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debug-modules-extra-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debuginfo-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-debuginfo-common-x86_64-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-devel-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-modules-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\nkernel-rt-modules-extra-4.18.0-477.10.1.rt7.274.el8_8.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2023 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n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\npumjkxlxpLs=ytDn\n-----END PGP SIGNATURE-----\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://listman.redhat.com/mailman/listinfo/rhsa-announce\n. Description:\n\nRed Hat Advanced Cluster Management for Kubernetes 2.5.9 images\n\nRed Hat Advanced Cluster Management for Kubernetes provides the\ncapabilities to address common challenges that administrators and site\nreliability engineers face as they work across a range of public and\nprivate cloud environments. Clusters and applications are all visible and\nmanaged from a single console\u2014with security policy built in. \n\nThis advisory contains the container images for Red Hat Advanced Cluster\nManagement for Kubernetes, which fix several bugs. Bugs fixed (https://bugzilla.redhat.com/):\n\n2208376 - CVE-2023-32314 vm2: Sandbox Escape\n2208377 - CVE-2023-32313 vm2: Inspect Manipulation\n\n5. Description:\n\nLogging Subsystem 5.7.2 - Red Hat OpenShift\n\nSecurity Fix(es):\n\n* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK\ndecoding (CVE-2022-41723)\n\n* rubygem-rack: denial of service in header parsing (CVE-2023-27539)\n\n* rubygem-activesupport: Possible XSS in SafeBuffer#bytesplice\n(CVE-2023-28120)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. Bugs fixed (https://bugzilla.redhat.com/):\n\n2178358 - CVE-2022-41723 net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding\n2179637 - CVE-2023-28120 rubygem-activesupport: Possible XSS in SafeBuffer#bytesplice\n2179649 - CVE-2023-27539 rubygem-rack: denial of service in header parsing\n\n5. JIRA issues fixed (https://issues.redhat.com/):\n\nLOG-3314 - [fluentd] The passphrase can not be enabled when forwarding logs to Kafka\nLOG-3316 - openshift-logging namespace can not be deleted directly when use lokistack as default store. \nLOG-3330 - run.sh shows incorrect chunk_limit_size if changed. \nLOG-3445 - [vector to loki] validation is not disabled when tls.insecureSkipVerify=true\nLOG-3749 - Unability to configure nodePlacement and toleration for logging-view-plugin\nLOG-3784 - [fluentd http] the defaut value HTTP content type application/x-ndjson is unsupported on datadog\nLOG-3827 - [fluentd http] The passphase isn\u0027t generated in fluent.conf\nLOG-3878 - [vector] PHP multiline errors are collected line by line when detectMultilineErrors is enabled. \nLOG-3945 - [Vector] Collector pods in CrashLoopBackOff when ClusterLogForwarder pipeline has space in between the pipeline name. \nLOG-3997 - Add http to log_forwarder_output_info metrics\nLOG-4011 - [Vector] Collector not complying with the custom tlsSecurityProfile configuration. \nLOG-4019 - [release-5.7] fluentd multiline exception plugin fails to detect JS client exception\nLOG-4049 - [release-5.7] User can list labels and label values for all user workload namespaces via Loki Label APIs\nLOG-4052 - [release-5.7] Fix Loki timeouts querying logs from OCP Console\nLOG-4098 - [release-5.7] No log_forwarder_output_info for splunk and google logging\nLOG-4151 - Fluentd fix missing nil check for rotated_tw in update_watcher\nLOG-4163 - [release-5.7] TLS configuration for multiple Kafka brokers is not created in Vector\nLOG-4185 - Resources, tolerations and nodeSelector for the collector are missing\nLOG-4218 - Vector fails to run when configuring syslog forwarding for audit log\nLOG-4219 - Vector handles journal log as container log when enabling syslog forwarding. It breaks the compatibility with Fluentd\nLOG-4220 - [RHOCP4.11] Logs of POD which doesn\u0027t have labels specified by structuredTypeKey are parsed to JSON, and forwarded to app-xxxxxx\nLOG-4221 - [release-5.7] Fluentd wrongly closes a log file due to hash collision\n\n6",
"sources": [
{
"db": "NVD",
"id": "CVE-2021-33656"
},
{
"db": "VULHUB",
"id": "VHN-393734"
},
{
"db": "VULMON",
"id": "CVE-2021-33656"
},
{
"db": "PACKETSTORM",
"id": "168221"
},
{
"db": "PACKETSTORM",
"id": "168203"
},
{
"db": "PACKETSTORM",
"id": "168238"
},
{
"db": "PACKETSTORM",
"id": "168253"
},
{
"db": "PACKETSTORM",
"id": "168251"
},
{
"db": "PACKETSTORM",
"id": "168589"
},
{
"db": "PACKETSTORM",
"id": "172336"
},
{
"db": "PACKETSTORM",
"id": "172703"
},
{
"db": "PACKETSTORM",
"id": "172895"
}
],
"trust": 1.89
},
"external_ids": {
"_id": null,
"data": [
{
"db": "NVD",
"id": "CVE-2021-33656",
"trust": 2.7
},
{
"db": "OPENWALL",
"id": "OSS-SECURITY/2022/07/19/3",
"trust": 1.8
},
{
"db": "PACKETSTORM",
"id": "168253",
"trust": 0.8
},
{
"db": "PACKETSTORM",
"id": "168203",
"trust": 0.8
},
{
"db": "PACKETSTORM",
"id": "168221",
"trust": 0.8
},
{
"db": "PACKETSTORM",
"id": "168589",
"trust": 0.8
},
{
"db": "PACKETSTORM",
"id": "168238",
"trust": 0.8
},
{
"db": "PACKETSTORM",
"id": "168264",
"trust": 0.7
},
{
"db": "PACKETSTORM",
"id": "168177",
"trust": 0.7
},
{
"db": "PACKETSTORM",
"id": "168335",
"trust": 0.7
},
{
"db": "AUSCERT",
"id": "ESB-2022.4257",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2022.4278",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2022.4342",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2022.4317",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2022.4225",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2023.3339",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2022.4087",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2022.4184",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2022.4063",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2023.3060",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2022.4118",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202207-1508",
"trust": 0.6
},
{
"db": "PACKETSTORM",
"id": "168251",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "168263",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "168324",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "168237",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "168236",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "168261",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-393734",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2021-33656",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "172336",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "172703",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "172895",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-393734"
},
{
"db": "VULMON",
"id": "CVE-2021-33656"
},
{
"db": "PACKETSTORM",
"id": "168221"
},
{
"db": "PACKETSTORM",
"id": "168203"
},
{
"db": "PACKETSTORM",
"id": "168238"
},
{
"db": "PACKETSTORM",
"id": "168253"
},
{
"db": "PACKETSTORM",
"id": "168251"
},
{
"db": "PACKETSTORM",
"id": "168589"
},
{
"db": "PACKETSTORM",
"id": "172336"
},
{
"db": "PACKETSTORM",
"id": "172703"
},
{
"db": "PACKETSTORM",
"id": "172895"
},
{
"db": "CNNVD",
"id": "CNNVD-202207-1508"
},
{
"db": "NVD",
"id": "CVE-2021-33656"
}
]
},
"id": "VAR-202207-1358",
"iot": {
"_id": null,
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-393734"
}
],
"trust": 0.01
},
"last_update_date": "2026-04-10T22:16:32.373000Z",
"patch": {
"_id": null,
"data": [
{
"title": "Linux kernel Buffer error vulnerability fix",
"trust": 0.6,
"url": "http://123.124.177.30/web/xxk/bdxqById.tag?id=207700"
}
],
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202207-1508"
}
]
},
"problemtype_data": {
"_id": null,
"data": [
{
"problemtype": "CWE-787",
"trust": 1.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-393734"
},
{
"db": "NVD",
"id": "CVE-2021-33656"
}
]
},
"references": {
"_id": null,
"data": [
{
"trust": 1.8,
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/releases/5.10.127/vt-drop-old-font-ioctls.patch"
},
{
"trust": 1.8,
"url": "http://www.openwall.com/lists/oss-security/2022/07/19/3"
},
{
"trust": 1.7,
"url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html"
},
{
"trust": 1.7,
"url": "https://www.openeuler.org/en/security/cve/detail.html?id=cve-2021-33656\u0026packagename=kernel"
},
{
"trust": 0.9,
"url": "https://nvd.nist.gov/vuln/detail/cve-2021-33656"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2022.4317"
},
{
"trust": 0.6,
"url": "https://packetstormsecurity.com/files/168335/ubuntu-security-notice-usn-5605-1.html"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2023.3060"
},
{
"trust": 0.6,
"url": "https://packetstormsecurity.com/files/168177/ubuntu-security-notice-usn-5580-1.html"
},
{
"trust": 0.6,
"url": "https://packetstormsecurity.com/files/168238/ubuntu-security-notice-usn-5592-1.html"
},
{
"trust": 0.6,
"url": "https://packetstormsecurity.com/files/168203/ubuntu-security-notice-usn-5589-1.html"
},
{
"trust": 0.6,
"url": "https://packetstormsecurity.com/files/168589/ubuntu-security-notice-usn-5650-1.html"
},
{
"trust": 0.6,
"url": "https://cxsecurity.com/cveshow/cve-2021-33656/"
},
{
"trust": 0.6,
"url": "https://vigilance.fr/vulnerability/linux-kernel-buffer-overflow-via-pio-font-38848"
},
{
"trust": 0.6,
"url": "https://packetstormsecurity.com/files/168253/ubuntu-security-notice-usn-5595-1.html"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2022.4063"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2022.4184"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2023.3339"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2022.4087"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2022.4342"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2022.4257"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2022.4278"
},
{
"trust": 0.6,
"url": "https://packetstormsecurity.com/files/168221/ubuntu-security-notice-usn-5591-1.html"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2022.4225"
},
{
"trust": 0.6,
"url": "https://packetstormsecurity.com/files/168264/ubuntu-security-notice-usn-5597-1.html"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2022.4118"
},
{
"trust": 0.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-3028"
},
{
"trust": 0.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2021-33655"
},
{
"trust": 0.3,
"url": "https://nvd.nist.gov/vuln/detail/cve-2021-33061"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-25265"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-47929"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-42703"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-4129"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-3567"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-43750"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-2196"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-3566"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-42720"
},
{
"trust": 0.3,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-20141"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-3564"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-3239"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-3628"
},
{
"trust": 0.3,
"url": "https://bugzilla.redhat.com/):"
},
{
"trust": 0.3,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-1789"
},
{
"trust": 0.3,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-25265"
},
{
"trust": 0.3,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-2196"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-41218"
},
{
"trust": 0.3,
"url": "https://nvd.nist.gov/vuln/detail/cve-2021-26341"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-1679"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-1789"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-39188"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2023-0461"
},
{
"trust": 0.3,
"url": "https://listman.redhat.com/mailman/listinfo/rhsa-announce"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-42721"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2023-1195"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/team/contact/"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2023-1582"
},
{
"trust": 0.3,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-30594"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-2663"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-3623"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-3619"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-3028"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-3707"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-20141"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-42722"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-3522"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-3524"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-1462"
},
{
"trust": 0.3,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-1679"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2021-26341"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-39189"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-41674"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2023-0394"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-30594"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2022-3625"
},
{
"trust": 0.3,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-1462"
},
{
"trust": 0.3,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-2663"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2021-33655"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2021-33656"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2023-23454"
},
{
"trust": 0.2,
"url": "https://ubuntu.com/security/notices/usn-5591-1"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-3239"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/articles/11258"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2023-25815"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2023-27535"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2023-22490"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2022-3627"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2023-29007"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2022-3970"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2022-36227"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2023-23946"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2023-25652"
},
{
"trust": 0.1,
"url": "https://www.openeuler.org/en/security/cve/detail.html?id=cve-2021-33656\u0026amp;packagename=kernel"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-raspi/5.4.0-1069.79"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux/5.4.0-125.141"
},
{
"trust": 0.1,
"url": "https://ubuntu.com/security/notices/usn-5589-1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-gcp-5.4/5.4.0-1087.95~18.04.1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-bluefield/5.4.0-1045.50"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-oracle/5.4.0-1082.90"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-azure/5.4.0-1090.95"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-aws/5.4.0-1084.91"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-ibm/5.4.0-1032.36"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-gkeop/5.4.0-1052.55"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-ibm-5.4/5.4.0-1032.36~18.04.1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-kvm/5.4.0-1074.79"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-gcp/5.4.0-1087.95"
},
{
"trust": 0.1,
"url": "https://ubuntu.com/security/notices/usn-5592-1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-gke/5.4.0-1081.87"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-oracle-5.4/5.4.0-1082.90~18.04.1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-aws-5.4/5.4.0-1084.91~18.04.1"
},
{
"trust": 0.1,
"url": "https://ubuntu.com/security/notices/usn-5595-1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-azure-5.4/5.4.0-1090.95~18.04.1"
},
{
"trust": 0.1,
"url": "https://ubuntu.com/security/notices/usn-5591-4"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-aws/4.15.0-1140.151"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-20368"
},
{
"trust": 0.1,
"url": "https://ubuntu.com/security/notices/usn-5650-1"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-1729"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-2639"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-36946"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-1199"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-0850"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-2964"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-1204"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2021-4037"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-2978"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-3202"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/errata/rhsa-2023:2736"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-3522"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/team/key/"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-2795"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-3204"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-2795"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-3204"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-32313"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-32314"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.5/html-single/install/index#installing"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-41973"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.5/html/release_notes/"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/errata/rhsa-2023:3356"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-1999"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-25147"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-28120"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/errata/rhsa-2023:3495"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-27539"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-41723"
},
{
"trust": 0.1,
"url": "https://issues.redhat.com/):"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-25147"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-2491"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-393734"
},
{
"db": "VULMON",
"id": "CVE-2021-33656"
},
{
"db": "PACKETSTORM",
"id": "168221"
},
{
"db": "PACKETSTORM",
"id": "168203"
},
{
"db": "PACKETSTORM",
"id": "168238"
},
{
"db": "PACKETSTORM",
"id": "168253"
},
{
"db": "PACKETSTORM",
"id": "168251"
},
{
"db": "PACKETSTORM",
"id": "168589"
},
{
"db": "PACKETSTORM",
"id": "172336"
},
{
"db": "PACKETSTORM",
"id": "172703"
},
{
"db": "PACKETSTORM",
"id": "172895"
},
{
"db": "CNNVD",
"id": "CNNVD-202207-1508"
},
{
"db": "NVD",
"id": "CVE-2021-33656"
}
]
},
"sources": {
"_id": null,
"data": [
{
"db": "VULHUB",
"id": "VHN-393734",
"ident": null
},
{
"db": "VULMON",
"id": "CVE-2021-33656",
"ident": null
},
{
"db": "PACKETSTORM",
"id": "168221",
"ident": null
},
{
"db": "PACKETSTORM",
"id": "168203",
"ident": null
},
{
"db": "PACKETSTORM",
"id": "168238",
"ident": null
},
{
"db": "PACKETSTORM",
"id": "168253",
"ident": null
},
{
"db": "PACKETSTORM",
"id": "168251",
"ident": null
},
{
"db": "PACKETSTORM",
"id": "168589",
"ident": null
},
{
"db": "PACKETSTORM",
"id": "172336",
"ident": null
},
{
"db": "PACKETSTORM",
"id": "172703",
"ident": null
},
{
"db": "PACKETSTORM",
"id": "172895",
"ident": null
},
{
"db": "CNNVD",
"id": "CNNVD-202207-1508",
"ident": null
},
{
"db": "NVD",
"id": "CVE-2021-33656",
"ident": null
}
]
},
"sources_release_date": {
"_id": null,
"data": [
{
"date": "2022-07-18T00:00:00",
"db": "VULHUB",
"id": "VHN-393734",
"ident": null
},
{
"date": "2022-07-18T00:00:00",
"db": "VULMON",
"id": "CVE-2021-33656",
"ident": null
},
{
"date": "2022-09-01T16:32:59",
"db": "PACKETSTORM",
"id": "168221",
"ident": null
},
{
"date": "2022-08-31T16:43:40",
"db": "PACKETSTORM",
"id": "168203",
"ident": null
},
{
"date": "2022-09-02T15:21:29",
"db": "PACKETSTORM",
"id": "168238",
"ident": null
},
{
"date": "2022-09-05T15:09:08",
"db": "PACKETSTORM",
"id": "168253",
"ident": null
},
{
"date": "2022-09-05T15:08:18",
"db": "PACKETSTORM",
"id": "168251",
"ident": null
},
{
"date": "2022-10-01T15:15:13",
"db": "PACKETSTORM",
"id": "168589",
"ident": null
},
{
"date": "2023-05-16T17:04:05",
"db": "PACKETSTORM",
"id": "172336",
"ident": null
},
{
"date": "2023-06-05T17:11:53",
"db": "PACKETSTORM",
"id": "172703",
"ident": null
},
{
"date": "2023-06-13T21:26:17",
"db": "PACKETSTORM",
"id": "172895",
"ident": null
},
{
"date": "2022-07-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202207-1508",
"ident": null
},
{
"date": "2022-07-18T15:15:08.043000",
"db": "NVD",
"id": "CVE-2021-33656",
"ident": null
}
]
},
"sources_update_date": {
"_id": null,
"data": [
{
"date": "2022-10-29T00:00:00",
"db": "VULHUB",
"id": "VHN-393734",
"ident": null
},
{
"date": "2022-07-19T00:00:00",
"db": "VULMON",
"id": "CVE-2021-33656",
"ident": null
},
{
"date": "2023-06-14T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202207-1508",
"ident": null
},
{
"date": "2025-04-02T18:33:53.340000",
"db": "NVD",
"id": "CVE-2021-33656",
"ident": null
}
]
},
"threat_type": {
"_id": null,
"data": "local",
"sources": [
{
"db": "PACKETSTORM",
"id": "168221"
},
{
"db": "PACKETSTORM",
"id": "168203"
},
{
"db": "PACKETSTORM",
"id": "168238"
},
{
"db": "PACKETSTORM",
"id": "168253"
},
{
"db": "PACKETSTORM",
"id": "168251"
},
{
"db": "PACKETSTORM",
"id": "168589"
},
{
"db": "CNNVD",
"id": "CNNVD-202207-1508"
}
],
"trust": 1.2
},
"title": {
"_id": null,
"data": "Linux kernel Buffer error vulnerability",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202207-1508"
}
],
"trust": 0.6
},
"type": {
"_id": null,
"data": "arbitrary",
"sources": [
{
"db": "PACKETSTORM",
"id": "168221"
},
{
"db": "PACKETSTORM",
"id": "168203"
},
{
"db": "PACKETSTORM",
"id": "168238"
},
{
"db": "PACKETSTORM",
"id": "168253"
},
{
"db": "PACKETSTORM",
"id": "168251"
},
{
"db": "PACKETSTORM",
"id": "168589"
}
],
"trust": 0.6
}
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.