[Important] [Security] Virtuozzo ReadyKernel patch 143.0 for Virtuozzo Hybrid Server 7.0, 7.5¶
Issue date: 2022-06-29
Applies to: Virtuozzo Hybrid Server 7.0, Virtuozzo Hybrid Server 7.5
Virtuozzo Advisory ID: VZA-2022-021
The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.x.
2. Security Fixes¶
[Important] [3.10.0-1127.8.2.vz7.158.8 to 3.10.0-1160.53.1.vz7.185.3] The bug allows to initialize a non-stateful lookup expressions which points to a not properly detached set, which might lead to UAF. (CVE-2022-1966)
[Important] [3.10.0-1127.8.2.vz7.158.8 to 3.10.0-1160.53.1.vz7.185.3] CPU hotplug leads to a VM crash on AMD processors with PCID. (PSBM-139465)
3. Installing the Update¶
Download, install, and immediately apply the patch to the current kernel by running
The new and updated packages are listed in the JSON file.