Back to guides list

[Important] [Security] Virtuozzo ReadyKernel Patch 153.1 for Virtuozzo Hybrid Server 7.5

Issue date: 2023-02-14

Applies to: Virtuozzo Hybrid Server 7.5

Virtuozzo Advisory ID: VZA-2023-003

1. Overview

The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5.

2. Security Fixes

  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Quota: check the block number when reading the block in a quota file. (CVE-2021-45868)

  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Kernel data leak in ‘pfkey_register’. (CVE-2022-1353)

  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Virtualize timestamps in ‘/dev/kmsg’ and syslog outputs. (PSBM-145263)

  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Netfilter per-CPU memory leak on error path. (PSBM-141114)

3. Installing the Update

Download, install, and immediately apply the patch to the current kernel by running readykernel update.

Nov 18, 2024
Edit Print