Red Hat Security AdvisoryRHSA-2023:3705
kpatch-patch security update
Released 2023-06-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 9) kpatch-patch-5_14_0-284_11_1-1-1.el9_2
Fixes 2 records
Priority MEDIUM 51
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.13443 · Published 2023-05-08 · Fixed CWE-416
Priority LOW 36
A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0025 · Published 2023-05-01 · Fixed in 6.3 CWE-416
