TI-2023-22856 CVE-2023-42753 · GHSA-j66v-q82h-4f8h
Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
Priority HIGH 69
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel.
RHSA-2023:7382
kernel security and bug fix update
Released 2023-11-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.0) kernel-tools-libs-devel-5.14.0-70.80.1.el9_0
- Red Hat Enterprise Linux AppStream EUS (v.9.0) kernel-debug-devel-5.14.0-70.80.1.el9_0, kernel-debug-devel-matched-5.14.0-70.80.1.el9_0, kernel-devel-5.14.0-70.80.1.el9_0 +5
- Red Hat Enterprise Linux BaseOS EUS (v.9.0) bpftool-5.14.0-70.80.1.el9_0, kernel-5.14.0-70.80.1.el9_0, kernel-abi-stablelists-5.14.0-70.80.1.el9_0 +14
Fixes 7 records
TI-2023-03836 CVE-2023-4147 · GHSA-pcv9-72q8-27vc
Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free
Priority HIGH 69
A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID.
TI-2023-07042 CVE-2023-20593
Information disclosure through error messages in AMD Ryzen™ 3000 Series Desktop…
Priority MEDIUM 58
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
TI-2023-03529 CVE-2023-3776 · GHSA-fcg7-9x44-gx43
Use-after-free in Linux kernel's net/sched: cls_fw component
Priority LOW 37
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
TI-2023-03718 CVE-2023-4004 · GHSA-h3j8-wx8r-29j6
Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()
Priority LOW 36
A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END.
TI-2023-03563 CVE-2023-3812 · GHSA-v4mv-7g6h-5vh8
Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags
Priority LOW 36
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled.
TI-2023-00559 CVE-2023-0590 · GHSA-rr33-cw2h-vrch
Use after free in Kernel
Priority LOW 21
A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem.