FEDORA-2022-484e226872 — security update for kernel

stable

kernel-5.18.17-100.fc35

FEDORA-2022-484e226872 created by jforbes 7 months ago for Fedora 35

The 5.18.17 stable kernel update contains a number of important fixes across the tree.

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2022-484e226872

This update has been submitted for testing by jforbes.

7 months ago

This update's test gating status has been changed to 'waiting'.

7 months ago

This update's test gating status has been changed to 'failed'.

7 months ago

This update's test gating status has been changed to 'passed'.

7 months ago

This update has been pushed to testing.

7 months ago

nixuser commented & provided feedback 7 months ago

karma

Working OK for me in a VirtualBox VM but as so often happens in VMs regression tests sometimes fail on timer-overhead.

Test Case kernel regression

geraldosimiao commented & provided feedback 7 months ago

karma

Working fine on KVM. Regression tests passed.

Test Case kernel regression

This update can be pushed to stable now if the maintainer wishes

7 months ago

bretth commented & provided feedback 7 months ago

karma

Default & performance tests pass (KVM)

Test Case kernel regression

This update has been submitted for stable by jforbes.

7 months ago

This update has been pushed to stable.

7 months ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

kernel-5.18.17-100.fc35

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

7 months ago

in testing

7 months ago

in stable

7 months ago

BZ#2114849 CVE-2022-2588 kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation

BZ#2114874 CVE-2022-2585 kernel: posix cpu timer use-after-free may lead to local privilege escalation

BZ#2114878 CVE-2022-2586 kernel: nf_tables cross-table potential use-after-free may lead to local privilege escalation

BZ#2117010 CVE-2022-2585 kernel: posix cpu timer use-after-free may lead to local privilege escalation [fedora-all]

BZ#2117014 CVE-2022-2588 kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation [fedora-all]

BZ#2117015 CVE-2022-2586 kernel: nf_tables cross-table potential use-after-free may lead to local privilege escalation [fedora-all]

kernel-5.18.17-100.fc35

Automated Test Results

passed

Test Cases


0	3	Test Case kernel regression