reorg CVE / Security related topics

docs/admin-guide/security/index.md

@@ -0,0 +1,4 @@
+# Security / Vulnerabilities / CVE
+
+This section contains information about known vulnerabilities in RHEL. It also provides guidance on how to mitigate these vulnerabilities and keep your system secure.
+

docs/admin-guide/security/mitigation_copyfail.md

@@ -1,11 +1,11 @@
-# copy.fail Mitigation
+# Mitigation copy.fail 
 !!!hint
     The lastest RHEL kernels do not include the vulnerability anymore, so please update to `kernel-4.18.0-553.123.1.el8_10` (RHEL8) or `kernel-5.14.0-611.54.1.el9_7` (RHEL9).  
     **With this or newer kernels below mitigation is not required**.
 
 Following command can be used to disable the vulnerable feature in the current default kernel.
 
-```
+```bash
 # Blacklist algif_aead_init
 grubby --update-kernel="$(grubby --default-kernel)" --args="initcall_blacklist=algif_aead_init"
 

docs/admin-guide/security/mitigation_dirty_frag.md

@@ -1,8 +1,8 @@
-# Dirty Frag Mitigation
+# Mitigation Dirty Frag
 
 Following commands can be used to disable the vulnerable feature:
 
-```
+```bash
 modprobe -r esp4 esp6 rxrpc
 cat > /etc/modprobe.d/mitigation-dirtyfrag.conf <<'EOF'
 install esp4 /bin/false
@@ -15,7 +15,7 @@ EOF
 ```
 
 The warning
-```
+```bash
 modprobe: FATAL: Module rxrpc not found.
 ```
 is fine