Red Hat Security AdvisoryRHSA-2023:4815
kernel security and bug fix update
Released 2023-08-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v. 8.2) bpftool-4.18.0-193.113.1.el8_2, kernel-4.18.0-193.113.1.el8_2, kernel-abi-whitelists-4.18.0-193.113.1.el8_2 +14
- Red Hat Enterprise Linux BaseOS E4S (v. 8.2) bpftool-4.18.0-193.113.1.el8_2, kernel-4.18.0-193.113.1.el8_2, kernel-abi-whitelists-4.18.0-193.113.1.el8_2 +14
- Red Hat Enterprise Linux BaseOS TUS (v. 8.2) bpftool-4.18.0-193.113.1.el8_2, kernel-4.18.0-193.113.1.el8_2, kernel-abi-whitelists-4.18.0-193.113.1.el8_2 +14
Fixes 3 records
Priority HIGH 69
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00524 · Published 2023-06-16 · Fixed CWE-787
Priority HIGH 69
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00479 · Published 2023-06-28 · Fixed in 6.4 CWE-787
Priority LOW 35
An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal).
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00487 · Published 2023-05-15 · Partial fix CWE-787