Red Hat Security AdvisoryRHSA-2023:4377
kernel security, bug fix, and enhancement update
Released 2023-08-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-284.25.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.25.1.el9_2, kernel-64k-devel-5.14.0-284.25.1.el9_2 +10
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.0.0-284.25.1.el9_2, kernel-5.14.0-284.25.1.el9_2, kernel-64k-5.14.0-284.25.1.el9_2 +29
- Red Hat Enterprise Linux CRB (v. 9) kernel-tools-libs-devel-5.14.0-284.25.1.el9_2
Fixes 5 records
Priority HIGH 69
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00524 · Published 2023-06-16 · Fixed CWE-787
Priority HIGH 69
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00479 · Published 2023-06-28 · Fixed in 6.4 CWE-787
Priority MEDIUM 58
The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp.
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.01377 · Published 2023-04-21 · Partial fix · 6.3 CWE-1303
Priority LOW 25
A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function.
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00726 · Published 2023-04-26 · Partial fix CWE-476
Priority LOW 24
A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service (host OS crash or host OS memory corruption) when nested virtualisation and the TDP MMU are…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00258 · Published 2022-11-30 · Fixed CWE-362
THREATIST.IORead the docs