Red Hat Security Advisory

RHSA-2023:6799

kpatch-patch security update

Released 2023-11-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v. 8.1) kpatch-patch-4_18_0-147_83_1-1-5.el8_1, kpatch-patch-4_18_0-147_85_1-1-3.el8_1, kpatch-patch-4_18_0-147_87_1-1-2.el8_1 +1

Fixes 3 records

TI-2023-03529 CVE-2023-3776 · GHSA-fcg7-9x44-gx43

Use-after-free in Linux kernel's net/sched: cls_fw component

LOW 37

A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00508 Published 2023-07-21 Fixed in 6.5 CWE-416

TI-2023-03368 CVE-2023-3609 · GHSA-2qmp-8j6q-mcq6

Use-after-free in Linux kernel's net/sched: cls_u32 component

LOW 37

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00487 Published 2023-07-21 Partial fix · 4.14.322, 4.19.291 +6 CWE-416

TI-2023-03563 CVE-2023-3812 · GHSA-v4mv-7g6h-5vh8

Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags

LOW 36

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00344 Published 2023-07-24 Partial fix · 4.18.0-513.9.1.rt7.311.el8_9, 4.18.0-513.9.1.el8_9 +12 CWE-787