Red Hat Security AdvisoryRHSA-2023:4962
kernel security, bug fix, and enhancement update
Released 2023-09-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.103.1.el8_4, kernel-4.18.0-305.103.1.el8_4, kernel-abi-stablelists-4.18.0-305.103.1.el8_4 +14
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) bpftool-4.18.0-305.103.1.el8_4, kernel-4.18.0-305.103.1.el8_4, kernel-abi-stablelists-4.18.0-305.103.1.el8_4 +19
- Red Hat Enterprise Linux BaseOS TUS (v.8.4) bpftool-4.18.0-305.103.1.el8_4, kernel-4.18.0-305.103.1.el8_4, kernel-abi-stablelists-4.18.0-305.103.1.el8_4 +14
Fixes 9 records
Priority HIGH 69
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00524 · Published 2023-06-16 · Fixed CWE-787
Priority HIGH 69
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00479 · Published 2023-06-28 · Fixed in 6.4 CWE-787
Priority HIGH 67
An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.4489 · Published 2023-09-29 · Partial fix CWE-120
Priority LOW 38
A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01056 · Published 2023-04-12 · Partial fix · 4.14.308, 4.19.276 +6 CWE-416
Priority LOW 37
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01544 · Published 2023-07-05 · Fixed CWE-787
Priority LOW 36
A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00917 · Published 2023-07-31 · Fixed in 4.18.0-477.27.1.rt7.290.el8_8, 4.18.0-477.27.1.el8_8 +9 CWE-416
Priority LOW 36
A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00914 · Published 2023-06-28 · Fixed in 4.14.322, 4.19.291 +5 CWE-416
Priority LOW 35
An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal).
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00487 · Published 2023-05-15 · Partial fix CWE-787
Priority LOW 33
A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel.
CVSS 3.1MEDIUM 6.8· Adjacent network · Low privileges · No interaction · EPSS 0.0147 · Published 2023-05-26 · Fixed CWE-250
THREATIST.IORead the docs