CVE-2022-0847

[linuxenjoyer]

Is the CentOS Stream 8 kernel vulnerable to CVE-2022-0847? And if so, is there an ETA to resolve this or a proposed mitigation? I see no such information on official channels.

Thank you

[TrevorH]

The RHEL 8 fixed kernel came out about 4 hours ago.

Red Hat have previously stated that they will fix security problems in RHEL first as it is their primary target. They've never given any indication of when Stream security fixes will be released or even if they ever will. Their attitude seems to be you get it when you are given it and should be grateful when that happens. It is one of the reasons why many of us will never run Stream. I'd suggest searching out their FAQ about Stream security fixes as they use different words and the above is just my interpretation of it.

[TrevorH]

There was a kernel hit git.centos.org earlier today that lists this CVE as being fixed. It's being built/tested ready for release at some point, hopefully sooner rather than later.