Red Hat Security Advisory

RHSA-2023:1008

kpatch-patch security update

Released 2023-02-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 9) kpatch-patch-5_14_0-162_12_1-1-1.el9_1, kpatch-patch-5_14_0-162_6_1-1-2.el9_1

TI-2022-04011 CVE-2022-4379 · GHSA-4hpx-4mpp-gqwv

MEDIUM 48

A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06633 Published 2023-01-10 Fixed CWE-416

TI-2023-00173 CVE-2023-0179

MEDIUM 40

A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01944 Published 2023-03-27 Fixed CWE-190

TI-2022-04010 CVE-2022-4378 · GHSA-v2c8-m646-2q5c

LOW 36

A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0044 Published 2023-01-05 Fixed CWE-131

TI-2022-03280 CVE-2022-3564 · GHSA-hjfq-c3jw-r92p

LOW 34

A vulnerability classified as critical was found in Linux Kernel.

CVSS 3.1HIGH 7.1 Adjacent network Low privileges No interaction EPSS 0.01455 Published 2022-10-17 Fixed CWE-119