Red Hat Security Advisory

RHSA-2023:3491

Red Hat Virtualization Host 4.4.z SP 1 security update

Released 2023-06-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.5.3-202306050942_8.6, redhat-virtualization-host-image-update-4.5.3-202306050942_8.6

TI-2022-19732 CVE-2022-41222 · GHSA-jfpq-w2g4-wcpm

HIGH 66

mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00494 Published 2022-09-21 Fixed CWE-416

TI-2023-01565 CVE-2023-1668 · GHSA-w6wj-g5cv-fh4w

MEDIUM 44

A flaw was found in openvswitch (OVS).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.01216 Published 2023-04-10 Partial fix CWE-670

TI-2022-17740 CVE-2022-38023 · GHSA-vww6-8mc9-cqg6

MEDIUM 40

Netlogon RPC Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02749 Published 2022-11-09 Partial fix · 6.0.6003.22175, 6.1.7601.26623 +5

TI-2022-04010 CVE-2022-4378 · GHSA-v2c8-m646-2q5c

LOW 36

A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0044 Published 2023-01-05 Fixed CWE-131

TI-2023-00436 CVE-2023-0461 · GHSA-222x-4qhm-7h5f

LOW 35

There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00652 Published 2023-02-28 Fixed CWE-416

TI-2022-03280 CVE-2022-3564 · GHSA-hjfq-c3jw-r92p

LOW 34

A vulnerability classified as critical was found in Linux Kernel.

CVSS 3.1HIGH 7.1 Adjacent network Low privileges No interaction EPSS 0.01455 Published 2022-10-17 Fixed CWE-119