Red Hat Security AdvisoryRHSA-2023:0979
kernel-rt security and bug fix update
Released 2023-02-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-core-5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-debug-5.14.0-162.18.1.rt21.181.el9_1 +7
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-core-5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-debug-5.14.0-162.18.1.rt21.181.el9_1 +9
Fixes 5 records
Priority MEDIUM 48
A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.06633 · Published 2023-01-10 · Fixed CWE-416
Priority MEDIUM 40
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01944 · Published 2023-03-27 · Fixed CWE-190
Priority LOW 36
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0044 · Published 2023-01-05 · Fixed CWE-131
Priority LOW 34
A vulnerability classified as critical was found in Linux Kernel.
CVSS 3.1HIGH 7.1· Adjacent network · Low privileges · No interaction · EPSS 0.01455 · Published 2022-10-17 · Fixed CWE-119
Priority LOW 25
An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input data.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00318 · Published 2022-08-22 · Partial fix CWE-131