Read the docs
Red Hat Security Advisory

RHSA-2023:5604

kernel security and bug fix update

Released 2023-10-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 9 records

TI-2023-01880 CVE-2023-1998

Spectre v2 SMT mitigations problem in Linux kernel

Priority MEDIUM 58

The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.01377 Published 2023-04-21 Partial fix · 6.3 CWE-1303
TI-2023-14953 CVE-2023-31248 · GHSA-vr3g-637q-4rh6

Use after free in Linux Kernel

Priority MEDIUM 40

Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0189 Published 2023-07-05 Fixed CWE-416
TI-2023-17488 CVE-2023-35001 · GHSA-mw8f-fcpv-j495

Out-of-bounds write in Linux Kernel

Priority LOW 37

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01544 Published 2023-07-05 Fixed CWE-787
TI-2023-29781 CVE-2023-53492 · GHSA-rj62-f3v9-qqwj

netfilter: nf_tables: do not ignore genmask when looking up chain by id

Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not ignore genmask when looking up chain by id When adding a rule to a chain referring to its ID, if that chain had been delete…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00168 Published 2025-10-01 Partial fix · 5.10.188, 5.15.121 +3
TI-2023-01140 CVE-2023-1206 · GHSA-36wf-hpjh-x3fr

Uncontrolled resource consumption in Kernel

Priority LOW 27

A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.0063 Published 2023-06-30 Partial fix CWE-400
TI-2023-29537 CVE-2023-53245 · GHSA-3xmr-hc67-565w

scsi: storvsc: Fix handling of virtual Fibre Channel timeouts

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00149 Published 2025-09-15 Partial fix · 4.14.323, 4.19.292 +6 CWE-476
TI-2023-12875 CVE-2023-28327 · GHSA-gpc7-6g78-vfxw

NULL pointer dereference in Linux

Priority LOW 24

A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00189 Published 2023-04-19 Partial fix CWE-476