Red Hat Security Advisory

RHSA-2023:1659

kpatch-patch security update

Released 2023-04-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) kpatch-patch-4_18_0-425_10_1-1-4.el8_7, kpatch-patch-4_18_0-425_13_1-1-2.el8_7, kpatch-patch-4_18_0-425_3_1-1-6.el8

Fixes 4 records

TI-2023-00252 CVE-2023-0266 · GHSA-h8jm-3c82-6vvq

Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel

CRITICAL 94KEV

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel.

CVSS 3.1HIGH 7.9 Adjacent network Low privileges No interaction EPSS 0.03702 Published 2023-01-30 Fixed CWE-416

TI-2023-00370 CVE-2023-0386 · GHSA-p72q-v88c-rprq

A flaw was found in the Linux kernel, where unauthorized access to the execution of the…

CRITICAL 93KEV

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0788 Published 2023-03-22 Fixed CWE-282

TI-2022-04010 CVE-2022-4378 · GHSA-v2c8-m646-2q5c

Out-of-bounds write in kernel

LOW 36

A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0044 Published 2023-01-05 Fixed CWE-131

TI-2023-01395 CVE-2023-1476 · GHSA-rccq-5462-rgcj

Kpatch: mm/mremap.c: incomplete fix for cve-2022-41222

LOW 32

A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00232 Published 2023-11-03 Fixed CWE-416