Red Hat Security AdvisoryRHSA-2023:4814
kernel-rt security and bug fix update
Released 2023-08-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Real Time EUS (v.9.0) kernel-rt-5.14.0-70.70.1.rt21.141.el9_0, kernel-rt-core-5.14.0-70.70.1.rt21.141.el9_0, kernel-rt-debug-5.14.0-70.70.1.rt21.141.el9_0 +7
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.0) kernel-rt-5.14.0-70.70.1.rt21.141.el9_0, kernel-rt-core-5.14.0-70.70.1.rt21.141.el9_0, kernel-rt-debug-5.14.0-70.70.1.rt21.141.el9_0 +9
Fixes 5 records
Priority HIGH 69
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00479 · Published 2023-06-28 · Fixed in 6.4 CWE-787
Priority LOW 33
do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00272 · Published 2023-03-15 · Fixed CWE-476
Priority LOW 31
A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00401 · Published 2022-04-29 · Partial fix · 4.9.311, 4.14.276 +5 CWE-200
Priority LOW 25
A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function.
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00726 · Published 2023-04-26 · Partial fix CWE-476
Priority LOW 21
An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19.
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00246 · Published 2022-09-02 · Partial fix CWE-362
THREATIST.IORead the docs