Red Hat Kernel Updates Fix Netfilter Root Escalation and TCP Information Leak

Red Hat released Important Linux-kernel updates for RHEL 8, RHEL 9, and RHEL 8.1 Update Services for SAP Solutions to address CVE-2022-32250, a netfilter nf_tables use-after-free write that a local attacker could exploit to gain root privileges. The advisories also remediate CVE-2022-1012, in which predictable TCP source-port generation can allow a network observer to fingerprint hosts, infer traffic patterns, and estimate outbound connections. RHEL 9 updates additionally address CVE-2022-1729, a perf_event_open race condition permitting privilege escalation, and an IPsec ESP buffer-overflow flaw.

Affected administrators should install the applicable updated kernel packages and reboot systems for the fixes to take effect; RHEL 8 version 4.18.0-372.19.1.el8_6 was provided for supported variants and x86_64, aarch64, ppc64le, and s390x architectures. The updates also include stability and performance corrections affecting dm-integrity, SR-IOV, SCTP, asymmetric TCP routing, and virtual-machine booting. Tracking for the netfilter flaw should use CVE-2022-32250: CVE-2022-1966 was rejected as a duplicate. Red Hat notes RHEL 7 is not affected by CVE-2022-1012 because it uses a different TCP port-selection algorithm.