أصدرت Red Hat عدة تحديثات لمعالجة عدد من الثغرات في المنتجات التالية:

• kernel
  • Red Hat CodeReady Linux Builder for ARM 64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
  • Red Hat Enterprise Linux for x86_64
  • Red Hat Enterprise Linux for IBM z Systems
  • Red Hat Virtualization Host
  • Red Hat Enterprise Linux for ARM 64
  • Red Hat Enterprise Linux for Power, little endian
  • Red Hat Enterprise Linux Server - TUS
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
  • Red Hat Enterprise Linux Server - AUS
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
  • Red Hat CodeReady Linux Builder for Power, little endian
  • Red Hat CodeReady Linux Builder for x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
• kernel-rt
  • Red Hat Enterprise Linux for Real Time for NFV
  • Red Hat Enterprise Linux for Real Time
• kpatch-patch
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support
  • Red Hat Enterprise Linux for x86_64
  • Red Hat Enterprise Linux Server - TUS
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
  • Red Hat Enterprise Linux for Power, little endian
  • Red Hat Enterprise Linux Server - AUS
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
• go-toolset-1.17 and go-toolset-1.17-golang
  • Red Hat Developer Tools (for RHEL Workstation)
  • Red Hat Developer Tools (for RHEL Server for System Z)
  • Red Hat Developer Tools (for RHEL Server for IBM Power LE)
  • Red Hat Developer Tools (for RHEL Server)

يمكن للمهاجم استغلال الثغرات وتنفيذ ما يلي:

• رفع الصلاحيات لزيادة قدرته على التعديل في النظام
• الكشف والإفصاح غير المصرح به للمعلومات
• هجمة حجب الخدمة (DoS attack)

يوصي المركز بتحديث النسخ المتأثرة حيث أصدرتRed Hat توضيحًا لهذه التحديثات:

• https://access.redhat.com/errata/RHSA-2022:5866
• https://access.redhat.com/errata/RHSA-2022:5839
• https://access.redhat.com/errata/RHSA-2022:5834
• https://access.redhat.com/errata/RHSA-2022:5819