Red Hat Security Advisory

RHSA-2023:1471

kpatch-patch security update

Released 2023-03-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 9) kpatch-patch-5_14_0-162_12_1-1-2.el9_1, kpatch-patch-5_14_0-162_18_1-1-1.el9_1, kpatch-patch-5_14_0-162_6_1-1-3.el9_1

Fixes 2 records

TI-2023-00252 CVE-2023-0266 · GHSA-h8jm-3c82-6vvq

Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel

CRITICAL 94KEV

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel.

CVSS 3.1HIGH 7.9 Adjacent network Low privileges No interaction EPSS 0.03702 Published 2023-01-30 Fixed CWE-416

TI-2022-04340 CVE-2022-4744 · GHSA-5r2r-5wx4-7x33

Double free in Kernel

LOW 36

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00459 Published 2023-03-30 Partial fix CWE-460