Red Hat Security AdvisoryRHSA-2023:0300
kernel-rt security and bug fix update
Released 2023-01-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-162.12.1.rt21.175.el9_1, kernel-rt-core-5.14.0-162.12.1.rt21.175.el9_1, kernel-rt-debug-5.14.0-162.12.1.rt21.175.el9_1 +7
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-162.12.1.rt21.175.el9_1, kernel-rt-core-5.14.0-162.12.1.rt21.175.el9_1, kernel-rt-debug-5.14.0-162.12.1.rt21.175.el9_1 +9
Fixes 6 records
Priority MEDIUM 47
The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05456 · Published 2022-11-04 · Fixed in 6.0.2 CWE-131
Priority LOW 36
An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00272 · Published 2023-01-27 · Fixed CWE-281
Priority LOW 35
The Linux kernel before 5.17.2 mishandles seccomp permissions.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00798 · Published 2022-05-12 · Partial fix CWE-862
Priority LOW 34
A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0031 · Published 2022-09-09 · Fixed CWE-119
Priority LOW 31
A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring().
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00381 · Published 2022-08-25 · Fixed CWE-667
Priority LOW 24
A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2C_SMBUS_BLOCK_PROC_CALL case (via the ioctl I2C_SMBUS) with malicious input data.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00238 · Published 2022-09-09 · Fixed CWE-120