Read the docs
Red Hat Security Advisory

RHSA-2023:4137

kernel security and bug fix update

Released 2023-07-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 6 records

TI-2022-20892 CVE-2022-42896 · GHSA-pvw8-76h2-7q32

Info Leak in l2cap_core in the Linux Kernel

Priority MEDIUM 45

There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotel…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02462 Published 2022-11-23 Partial fix CWE-416
TI-2023-02096 CVE-2023-2235 · GHSA-hwwj-xrc2-6hxg

Use-after-free in Linux kernel's Performance Events subsystem

Priority LOW 36

A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0025 Published 2023-05-01 Fixed in 6.3 CWE-416
TI-2023-01997 CVE-2023-2124

Out-of-bounds write in Kernel

Priority LOW 35

An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00487 Published 2023-05-15 Partial fix CWE-787
TI-2023-01884 CVE-2023-2002 · GHSA-vp9w-43wr-g8fj

Incorrect authorization in Kernel

Priority LOW 33

A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel.

CVSS 3.1MEDIUM 6.8 Adjacent network Low privileges No interaction EPSS 0.0147 Published 2023-05-26 Fixed CWE-250
TI-2022-00915 CVE-2022-1016

Missing initialization of resource in Kernel

Priority LOW 25

A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00439 Published 2022-08-29 Partial fix CWE-824