Red Hat Security Advisory

RHSA-2023:1435

kpatch-patch security update

Released 2023-03-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v.9.0) kpatch-patch-5_14_0-70_22_1-1-6.el9_0, kpatch-patch-5_14_0-70_26_1-1-5.el9_0, kpatch-patch-5_14_0-70_30_1-1-3.el9_0 +2

TI-2023-00252 CVE-2023-0266 · GHSA-h8jm-3c82-6vvq

CRITICAL 94KEV

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel.

CVSS 3.1HIGH 7.9 Adjacent network Low privileges No interaction EPSS 0.03702 Published 2023-01-30 Fixed CWE-416

TI-2022-04011 CVE-2022-4379 · GHSA-4hpx-4mpp-gqwv

MEDIUM 48

A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06633 Published 2023-01-10 Fixed CWE-416

TI-2023-00173 CVE-2023-0179

MEDIUM 40

A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01944 Published 2023-03-27 Fixed CWE-190

TI-2022-04010 CVE-2022-4378 · GHSA-v2c8-m646-2q5c

LOW 36

A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0044 Published 2023-01-05 Fixed CWE-131

TI-2022-03280 CVE-2022-3564 · GHSA-hjfq-c3jw-r92p

LOW 34

A vulnerability classified as critical was found in Linux Kernel.

CVSS 3.1HIGH 7.1 Adjacent network Low privileges No interaction EPSS 0.01455 Published 2022-10-17 Fixed CWE-119