Red Hat Security AdvisoryRHSA-2023:3847
kernel security, bug fix, and enhancement update
Released 2023-06-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-477.15.1.el8_8, kernel-4.18.0-477.15.1.el8_8, kernel-abi-stablelists-4.18.0-477.15.1.el8_8 +19
- Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-477.15.1.el8_8
Fixes 1 record
Priority LOW 33
do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00272 · Published 2023-03-15 · Fixed CWE-476
