Red Hat Security AdvisoryRHSA-2023:4888
kpatch-patch security update
Released 2023-08-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS EUS (v.8.6) kpatch-patch-4_18_0-372_41_1-1-7.el8_6, kpatch-patch-4_18_0-372_46_1-1-5.el8_6, kpatch-patch-4_18_0-372_51_1-1-4.el8_6 +3
Fixes 4 records
Priority HIGH 69
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00524 · Published 2023-06-16 · Fixed CWE-787
Priority MEDIUM 45
There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotel…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.02462 · Published 2022-11-23 · Partial fix CWE-416
Priority LOW 38
A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01056 · Published 2023-04-12 · Partial fix · 4.14.308, 4.19.276 +6 CWE-416
Priority LOW 36
A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00914 · Published 2023-06-28 · Fixed in 4.14.322, 4.19.291 +5 CWE-416
THREATIST.IORead the docs