Red Hat Security AdvisoryRHSA-2023:3723
kernel security and bug fix update
Released 2023-06-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-284.18.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.18.1.el9_2, kernel-64k-devel-5.14.0-284.18.1.el9_2 +10
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.0.0-284.18.1.el9_2, kernel-5.14.0-284.18.1.el9_2, kernel-64k-5.14.0-284.18.1.el9_2 +29
- Red Hat Enterprise Linux CRB (v. 9) kernel-tools-libs-devel-5.14.0-284.18.1.el9_2
Fixes 7 records
Priority MEDIUM 51
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.13443 · Published 2023-05-08 · Fixed CWE-416
Priority LOW 36
A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0025 · Published 2023-05-01 · Fixed in 6.3 CWE-416
Priority LOW 35
An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal).
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00487 · Published 2023-05-15 · Partial fix CWE-787
Priority LOW 33
do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00272 · Published 2023-03-15 · Fixed CWE-476
Priority LOW 33
A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel.
CVSS 3.1MEDIUM 6.8· Adjacent network · Low privileges · No interaction · EPSS 0.0147 · Published 2023-05-26 · Fixed CWE-250
Priority LOW 31
An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00242 · Published 2023-04-20 · Fixed CWE-787
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix out-of-bounds read When preparing an AER-CTR request, the driver copies the key provided by the user into a data structure that is acc…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00139 · Published 2025-12-30 · Partial fix · 5.15.99, 6.1.16 +2
THREATIST.IORead the docs