Red Hat Updates Fix Kernel Container Escape and TIPC Remote DoS Flaws

Red Hat released important updates for RHEL 8 Real Time and Red Hat Virtualization Host 4 to remediate seven Linux kernel vulnerabilities, including CVE-2021-4154 and CVE-2022-0435. CVE-2021-4154 is a use-after-free flaw in the cgroup v1 parser’s handling of fsconfig parameters that a local attacker can use for privilege escalation, container escape, or denial of service. The affected Real Time update is kernel-rt 4.18.0-348.20.1.rt7.150.el8_5; Red Hat Virtualization Host 4 received version 4.4.10, along with updated host-release packages.

CVE-2022-0435 affects the kernel’s TIPC networking module and can remotely trigger a stack overflow and kernel panic on systems using TIPC, causing denial of service. In configurations lacking effective stack protections, the issue could potentially lead to remote code execution when an attacker can obtain a stack canary. The virtualization advisory also addresses a Cyrus SASL flaw that could permit arbitrary SQL-command execution. Organizations running affected RHEL 8, Real Time, NFV, extended-support, or Red Hat Virtualization deployments should apply the applicable updates and reboot systems, particularly where containers or TIPC are enabled.