Red Hat Security AdvisoryRHSA-2023:5603
kernel-rt security and bug fix update
Released 2023-10-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Real Time EUS (v.9.0) kernel-rt-5.14.0-70.75.1.rt21.146.el9_0, kernel-rt-core-5.14.0-70.75.1.rt21.146.el9_0, kernel-rt-debug-5.14.0-70.75.1.rt21.146.el9_0 +7
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.0) kernel-rt-5.14.0-70.75.1.rt21.146.el9_0, kernel-rt-core-5.14.0-70.75.1.rt21.146.el9_0, kernel-rt-debug-5.14.0-70.75.1.rt21.146.el9_0 +9
Fixes 7 records
Priority HIGH 69
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00524 · Published 2023-06-16 · Fixed CWE-787
Priority MEDIUM 58
The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp.
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.01377 · Published 2023-04-21 · Partial fix · 6.3 CWE-1303
Priority MEDIUM 40
Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0189 · Published 2023-07-05 · Fixed CWE-416
Priority LOW 37
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01544 · Published 2023-07-05 · Fixed CWE-787
Priority LOW 27
A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack.
CVSS 3.1MEDIUM 5.7· Adjacent network · Low privileges · No interaction · EPSS 0.0063 · Published 2023-06-30 · Partial fix CWE-400
Priority LOW 24
A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00189 · Published 2023-04-19 · Partial fix CWE-476
Priority LOW 24
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00204 · Published 2023-06-12 · Partial fix CWE-1335
THREATIST.IORead the docs