Red Hat Security Advisory

RHSA-2023:3517

kpatch-patch security update

Released 2023-06-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v.8.4) kpatch-patch-4_18_0-305_71_1-1-5.el8_4, kpatch-patch-4_18_0-305_72_1-1-4.el8_4, kpatch-patch-4_18_0-305_76_1-1-3.el8_4 +3

Fixes 1 record

TI-2022-20892 CVE-2022-42896 · GHSA-pvw8-76h2-7q32

Info Leak in l2cap_core in the Linux Kernel

MEDIUM 45

There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotel…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02462 Published 2022-11-23 Partial fix CWE-416