Red Hat Security AdvisoryRHSA-2023:5622
kernel security and bug fix update
Released 2023-10-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1160.102.1.el7, kernel-3.10.0-1160.102.1.el7, kernel-abi-whitelists-3.10.0-1160.102.1.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.102.1.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.102.1.el7
- Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1160.102.1.el7, kernel-3.10.0-1160.102.1.el7, kernel-abi-whitelists-3.10.0-1160.102.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1160.102.1.el7, kernel-tools-libs-devel-3.10.0-1160.102.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1160.102.1.el7, kernel-3.10.0-1160.102.1.el7, kernel-abi-whitelists-3.10.0-1160.102.1.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.102.1.el7
Fixes 3 records
Priority MEDIUM 51
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.13443 · Published 2023-05-08 · Fixed CWE-416
Priority LOW 37
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01544 · Published 2023-07-05 · Fixed CWE-787
Priority LOW 37
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00487 · Published 2023-07-21 · Partial fix · 4.14.322, 4.19.291 +6 CWE-416
