Read the docs
Red Hat Security Advisory

RHSA-2023:7398

kernel security and bug fix update

Released 2023-11-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 8 records

TI-2023-03529 CVE-2023-3776 · GHSA-fcg7-9x44-gx43

Use-after-free in Linux kernel's net/sched: cls_fw component

Priority LOW 37

A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00508 Published 2023-07-21 Fixed in 6.5 CWE-416
TI-2023-03368 CVE-2023-3609 · GHSA-2qmp-8j6q-mcq6

Use-after-free in Linux kernel's net/sched: cls_u32 component

Priority LOW 37

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00487 Published 2023-07-21 Partial fix · 4.14.322, 4.19.291 +6 CWE-416
TI-2022-25759 CVE-2022-50274 · GHSA-x77f-2wpm-x48r

media: dvbdev: adopts refcnt to avoid UAF

Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: adopts refcnt to avoid UAF dvb_unregister_device() is known that prone to use-after-free.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00164 Published 2025-09-15 Partial fix · 4.14.303, 4.19.270 +6 CWE-416
TI-2022-25728 CVE-2022-50243 · GHSA-2hwr-p3mh-h7f6

sctp: handle the error returned from sctp_auth_asoc_init_active_key

Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: sctp: handle the error returned from sctp_auth_asoc_init_active_key When it returns an error from sctp_auth_asoc_init_active_key(), the active_key is ac…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00164 Published 2025-09-15 Partial fix · 4.19.262, 5.4.220 +6 CWE-416
TI-2023-02042 CVE-2023-2177 · GHSA-jh37-vq2p-5j5h

NULL pointer dereference in Linux

Priority LOW 24

A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00207 Published 2023-04-20 Fixed CWE-476