Red Hat Security AdvisoryRHSA-2023:5628
kernel security and bug fix update
Released 2023-10-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.108.1.el8_4, kernel-4.18.0-305.108.1.el8_4, kernel-abi-stablelists-4.18.0-305.108.1.el8_4 +14
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) bpftool-4.18.0-305.108.1.el8_4, kernel-4.18.0-305.108.1.el8_4, kernel-abi-stablelists-4.18.0-305.108.1.el8_4 +19
- Red Hat Enterprise Linux BaseOS TUS (v.8.4) bpftool-4.18.0-305.108.1.el8_4, kernel-4.18.0-305.108.1.el8_4, kernel-abi-stablelists-4.18.0-305.108.1.el8_4 +14
Fixes 4 records
Priority MEDIUM 58
A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RA…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0022 · Published 2023-03-27 · Partial fix CWE-226
Priority LOW 37
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00508 · Published 2023-07-21 · Fixed in 6.5 CWE-416
Priority LOW 37
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00487 · Published 2023-07-21 · Partial fix · 4.14.322, 4.19.291 +6 CWE-416
Priority LOW 24
In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00245 · Published 2023-02-28 · Partial fix CWE-476
