RHSA-2023:0854

Vulnerability from csaf_redhat - Published: 2023-02-21 09:01 - Updated: 2026-06-28 12:38
Summary
Red Hat Security Advisory: kernel-rt security and bug fix update
Severity
Important
Notes
Topic: An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: mm/mremap.c use-after-free vulnerability (CVE-2022-41222) * kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945) * kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * RHEL8-RT: Backport use of a dedicate thread for timer wakeups (BZ#2127204) * SNO Crashed twice - kernel BUG at lib/list_debug.c:28 (BZ#2132062) * Cannot trigger kernel dump using NMI on SNO node running PAO and RT kernel [RT-8] (BZ#2139851) * scheduling while atomic in fpu_clone() -> fpu_inherit_perms() (BZ#2154469) * The latest RHEL 8.7.z2 kernel changes need to be merged into the RT source tree to keep source parity between the two kernels. (BZ#2159806)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input data. This flaw allows a local user to crash the system.

CWE-131 - Incorrect Calculation of Buffer Size
Affected products
Product Identifier Version Remediation
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src —
Vendor Fix fix
Workaround
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src —
Vendor Fix fix
Workaround
Unresolved product id: RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 —
Vendor Fix fix
Workaround
Threats
Impact Moderate

A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code in how a race condition happens between rmap walk and mremap. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CWE-416 - Use After Free
Affected products
Fixed 30 products, the same list as for CVE-2022-2873
Threats
Impact Important

A buffer overflow flaw was found in the Linux kernel nfsd (network file system) subsystem. The way a user sends RPC over TCP with excess data added at the end of the message could allow a remote user to starve the resources, causing a denial of service.

CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 30 products, the same list as for CVE-2022-2873
Threats
Impact Important

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for kernel-rt is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.\n\nSecurity Fix(es):\n\n* kernel: mm/mremap.c use-after-free vulnerability (CVE-2022-41222)\n\n* kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)\n\n* kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* RHEL8-RT: Backport use of a dedicate thread for timer wakeups (BZ#2127204)\n\n* SNO Crashed twice - kernel BUG at lib/list_debug.c:28 (BZ#2132062)\n\n* Cannot trigger kernel dump using NMI on SNO node running PAO and RT kernel  [RT-8] (BZ#2139851)\n\n* scheduling while atomic in fpu_clone() -\u003e fpu_inherit_perms() (BZ#2154469)\n\n* The latest RHEL 8.7.z2 kernel changes need to be merged into the RT source tree to keep source parity between the two kernels. (BZ#2159806)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2023:0854",
        "url": "https://access.redhat.com/errata/RHSA-2023:0854"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2119048",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2119048"
      },
      {
        "category": "external",
        "summary": "2138818",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2138818"
      },
      {
        "category": "external",
        "summary": "2141752",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2141752"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0854.json"
      }
    ],
    "title": "Red Hat Security Advisory: kernel-rt security and bug fix update",
    "tracking": {
      "current_release_date": "2026-06-28T12:38:30+00:00",
      "generator": {
        "date": "2026-06-28T12:38:30+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.2.6"
        }
      },
      "id": "RHSA-2023:0854",
      "initial_release_date": "2023-02-21T09:01:40+00:00",
      "revision_history": [
        {
          "date": "2023-02-21T09:01:40+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2023-02-21T09:01:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-28T12:38:30+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Real Time for NFV (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux Real Time for NFV (v. 8)",
                  "product_id": "NFV-8.7.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::nfv"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux for Real Time (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux for Real Time (v. 8)",
                  "product_id": "RT-8.7.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::realtime"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
                "product": {
                  "name": "kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
                  "product_id": "kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@4.18.0-425.13.1.rt7.223.el8_7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                "product": {
                  "name": "kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_id": "kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@4.18.0-425.13.1.rt7.223.el8_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                "product": {
                  "name": "kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_id": "kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-core@4.18.0-425.13.1.rt7.223.el8_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_id": "kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug@4.18.0-425.13.1.rt7.223.el8_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_id": "kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-core@4.18.0-425.13.1.rt7.223.el8_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_id": "kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-devel@4.18.0-425.13.1.rt7.223.el8_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_id": "kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-kvm@4.18.0-425.13.1.rt7.223.el8_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_id": "kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-modules@4.18.0-425.13.1.rt7.223.el8_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_id": "kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-modules-extra@4.18.0-425.13.1.rt7.223.el8_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                "product": {
                  "name": "kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_id": "kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-devel@4.18.0-425.13.1.rt7.223.el8_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                "product": {
                  "name": "kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_id": "kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-kvm@4.18.0-425.13.1.rt7.223.el8_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                "product": {
                  "name": "kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_id": "kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-modules@4.18.0-425.13.1.rt7.223.el8_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                "product": {
                  "name": "kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_id": "kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-modules-extra@4.18.0-425.13.1.rt7.223.el8_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_id": "kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-debuginfo@4.18.0-425.13.1.rt7.223.el8_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_id": "kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo@4.18.0-425.13.1.rt7.223.el8_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_id": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64@4.18.0-425.13.1.rt7.223.el8_7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src"
        },
        "product_reference": "kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "NFV-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src"
        },
        "product_reference": "kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
        "relates_to_product_reference": "RT-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "RT-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "RT-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "RT-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "RT-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "RT-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "RT-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "RT-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "RT-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "RT-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "RT-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "RT-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "RT-8.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        },
        "product_reference": "kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
        "relates_to_product_reference": "RT-8.7.0.Z.MAIN"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-2873",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2022-08-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2119048"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds memory access flaw was found in the Linux kernel Intel\u2019s iSMT SMBus host controller driver in the way a user triggers the I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input data. This flaw allows a local user to crash the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: an out-of-bounds vulnerability in i2c-ismt driver",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
          "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
          "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-2873"
        },
        {
          "category": "external",
          "summary": "RHBZ#2119048",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2119048"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-2873",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-2873"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-2873",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2873"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/lkml/20220729093451.551672-1-zheyuma97@gmail.com/T/",
          "url": "https://lore.kernel.org/lkml/20220729093451.551672-1-zheyuma97@gmail.com/T/"
        }
      ],
      "release_date": "2022-07-29T09:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-02-21T09:01:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
            "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
            "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:0854"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, prevent module i2c-ismt from being loaded. Please see https://access.redhat.com/solutions/41278 for information on how to blacklist a kernel module to prevent it from loading automatically.",
          "product_ids": [
            "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
            "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
            "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
            "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
            "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: an out-of-bounds vulnerability in i2c-ismt driver"
    },
    {
      "cve": "CVE-2022-41222",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2022-09-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2138818"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free flaw was found in the Linux kernel\u2019s mm/mremap memory address space accounting source code in how a race condition happens between rmap walk and mremap. This flaw allows a local user to crash or potentially escalate their privileges on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: mm/mremap.c use-after-free vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
          "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
          "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-41222"
        },
        {
          "category": "external",
          "summary": "RHBZ#2138818",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2138818"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-41222",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-41222"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-41222",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41222"
        },
        {
          "category": "external",
          "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=97113eb39fa7972722ff490b947d8af023e1f6a2",
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=97113eb39fa7972722ff490b947d8af023e1f6a2"
        }
      ],
      "release_date": "2021-07-07T09:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-02-21T09:01:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
            "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
            "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:0854"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
            "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
            "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: mm/mremap.c use-after-free vulnerability"
    },
    {
      "cve": "CVE-2022-43945",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2022-11-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2141752"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow flaw was found in the Linux kernel nfsd (network file system) subsystem. The way a user sends RPC over TCP with excess data added at the end of the message could allow a remote user to starve the resources, causing a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: nfsd buffer overflow by RPC message over TCP with garbage data",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Affected versions of the Red Hat Enterprise Linux are 8.7 and higher, because starting from the 8.7 the affected source code introduced with the errata RHSA-2022:7683.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
          "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "NFV-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
          "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
          "RT-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-43945"
        },
        {
          "category": "external",
          "summary": "RHBZ#2141752",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2141752"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-43945",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-43945"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-43945",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-43945"
        },
        {
          "category": "external",
          "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f90497a16e434c2211c66e3de8e77b17868382b8",
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f90497a16e434c2211c66e3de8e77b17868382b8"
        }
      ],
      "release_date": "2022-10-03T09:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-02-21T09:01:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
            "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
            "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:0854"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
            "NFV-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "NFV-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.src",
            "RT-8.7.0.Z.MAIN:kernel-rt-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-devel-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-modules-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64",
            "RT-8.7.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-425.13.1.rt7.223.el8_7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: nfsd buffer overflow by RPC message over TCP with garbage data"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…