Red Hat Security AdvisoryRHSA-2023:4801
kernel security and bug fix update
Released 2023-08-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.0) kernel-tools-libs-devel-5.14.0-70.70.1.el9_0
- Red Hat Enterprise Linux AppStream EUS (v.9.0) kernel-debug-devel-5.14.0-70.70.1.el9_0, kernel-debug-devel-matched-5.14.0-70.70.1.el9_0, kernel-devel-5.14.0-70.70.1.el9_0 +5
- Red Hat Enterprise Linux BaseOS EUS (v.9.0) bpftool-5.14.0-70.70.1.el9_0, kernel-5.14.0-70.70.1.el9_0, kernel-abi-stablelists-5.14.0-70.70.1.el9_0 +14
Fixes 6 records
Priority HIGH 69
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00479 · Published 2023-06-28 · Fixed in 6.4 CWE-787
Priority HIGH 67
An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.4489 · Published 2023-09-29 · Partial fix CWE-120
Priority LOW 33
do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00272 · Published 2023-03-15 · Fixed CWE-476
Priority LOW 31
A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00401 · Published 2022-04-29 · Partial fix · 4.9.311, 4.14.276 +5 CWE-200
Priority LOW 25
A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function.
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00726 · Published 2023-04-26 · Partial fix CWE-476
Priority LOW 21
An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19.
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00246 · Published 2022-09-02 · Partial fix CWE-362
THREATIST.IORead the docs