Red Hat Security AdvisoryRHSA-2023:4967
kpatch-patch security update
Released 2023-09-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) kpatch-patch-4_18_0-305_76_1-1-5.el8_4, kpatch-patch-4_18_0-305_82_1-1-4.el8_4, kpatch-patch-4_18_0-305_86_2-1-3.el8_4 +3
Fixes 6 records
Priority HIGH 69
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00524 · Published 2023-06-16 · Fixed CWE-787
Priority HIGH 69
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00479 · Published 2023-06-28 · Fixed in 6.4 CWE-787
Priority LOW 38
A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01056 · Published 2023-04-12 · Partial fix · 4.14.308, 4.19.276 +6 CWE-416
Priority LOW 37
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01544 · Published 2023-07-05 · Fixed CWE-787
Priority LOW 36
A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00917 · Published 2023-07-31 · Fixed in 4.18.0-477.27.1.rt7.290.el8_8, 4.18.0-477.27.1.el8_8 +9 CWE-416
Priority LOW 36
A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00914 · Published 2023-06-28 · Fixed in 4.14.322, 4.19.291 +5 CWE-416
THREATIST.IORead the docs