Red Hat Security AdvisoryRHSA-2023:1202
kernel security, bug fix, and enhancement update
Released 2023-03-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.0) kernel-tools-libs-devel-5.14.0-70.49.1.el9_0
- Red Hat Enterprise Linux AppStream EUS (v.9.0) kernel-debug-devel-5.14.0-70.49.1.el9_0, kernel-debug-devel-matched-5.14.0-70.49.1.el9_0, kernel-devel-5.14.0-70.49.1.el9_0 +5
- Red Hat Enterprise Linux BaseOS EUS (v.9.0) bpftool-5.14.0-70.49.1.el9_0, kernel-5.14.0-70.49.1.el9_0, kernel-abi-stablelists-5.14.0-70.49.1.el9_0 +14
Fixes 6 records
Priority CRITICAL 94KEV
A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel.
CVSS 3.1HIGH 7.9· Adjacent network · Low privileges · No interaction · EPSS 0.03702 · Published 2023-01-30 · Fixed CWE-416
Priority MEDIUM 48
A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.06633 · Published 2023-01-10 · Fixed CWE-416
Priority MEDIUM 40
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01944 · Published 2023-03-27 · Fixed CWE-190
Priority LOW 36
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0044 · Published 2023-01-05 · Fixed CWE-131
Priority LOW 34
A vulnerability classified as critical was found in Linux Kernel.
CVSS 3.1HIGH 7.1· Adjacent network · Low privileges · No interaction · EPSS 0.01455 · Published 2022-10-17 · Fixed CWE-119
Priority LOW 24
A flaw was found in the Linux kernel Traffic Control (TC) subsystem.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00201 · Published 2022-12-05 · Partial fix CWE-833