Red Hat Security AdvisoryRHSA-2023:0854
kernel-rt security and bug fix update
Released 2023-02-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-425.13.1.rt7.223.el8_7, kernel-rt-core-4.18.0-425.13.1.rt7.223.el8_7, kernel-rt-debug-4.18.0-425.13.1.rt7.223.el8_7 +9
- Red Hat Enterprise Linux for Real Time (v. 8) kernel-rt-4.18.0-425.13.1.rt7.223.el8_7, kernel-rt-core-4.18.0-425.13.1.rt7.223.el8_7, kernel-rt-debug-4.18.0-425.13.1.rt7.223.el8_7 +7
Fixes 3 records
Priority HIGH 66
mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00494 · Published 2022-09-21 · Fixed CWE-416
Priority MEDIUM 47
The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05456 · Published 2022-11-04 · Fixed in 6.0.2 CWE-131
Priority LOW 25
An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input data.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00318 · Published 2022-08-22 · Partial fix CWE-131
THREATIST.IORead the docs