Red Hat Security AdvisoryRHSA-2023:4126
kernel-rt security and bug fix update
Released 2023-07-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Real Time TUS (v. 8.2) kernel-rt-4.18.0-193.109.1.rt13.160.el8_2, kernel-rt-core-4.18.0-193.109.1.rt13.160.el8_2, kernel-rt-debug-4.18.0-193.109.1.rt13.160.el8_2 +7
- Red Hat Enterprise Linux Real Time for NFV TUS (v. 8.2) kernel-rt-4.18.0-193.109.1.rt13.160.el8_2, kernel-rt-core-4.18.0-193.109.1.rt13.160.el8_2, kernel-rt-debug-4.18.0-193.109.1.rt13.160.el8_2 +9
Fixes 4 records
Priority MEDIUM 51
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.13443 · Published 2023-05-08 · Fixed CWE-416
Priority MEDIUM 47
A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05095 · Published 2023-03-16 · Fixed CWE-1050
Priority LOW 36
Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00304 · Published 2023-03-22 · Partial fix · 5.10.169, 5.15.95 +2 CWE-416
Priority LOW 35
There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00652 · Published 2023-02-28 · Fixed CWE-416
