Red Hat Security AdvisoryRHSA-2023:6813
kernel security and bug fix update
Released 2023-11-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS E4S (v. 8.1) bpftool-4.18.0-147.94.1.el8_1, kernel-4.18.0-147.94.1.el8_1, kernel-abi-whitelists-4.18.0-147.94.1.el8_1 +14
Fixes 4 records
Priority LOW 37
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00508 · Published 2023-07-21 · Fixed in 6.5 CWE-416
Priority LOW 37
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00487 · Published 2023-07-21 · Partial fix · 4.14.322, 4.19.291 +6 CWE-416
Priority LOW 36
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00344 · Published 2023-07-24 · Partial fix · 4.18.0-513.9.1.rt7.311.el8_9, 4.18.0-513.9.1.el8_9 +12 CWE-787
Priority LOW 24
In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00245 · Published 2023-02-28 · Partial fix CWE-476
THREATIST.IORead the docs