TI-2023-22856 CVE-2023-42753 · GHSA-j66v-q82h-4f8h
Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
Priority HIGH 69
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel.
RHSA-2023:7411
kpatch-patch security update
Released 2023-11-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS EUS (v.9.0) kpatch-patch-5_14_0-70_53_1-1-5.el9_0, kpatch-patch-5_14_0-70_58_1-1-4.el9_0, kpatch-patch-5_14_0-70_64_1-1-3.el9_0 +2
Fixes 5 records
TI-2023-03836 CVE-2023-4147 · GHSA-pcv9-72q8-27vc
Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free
Priority HIGH 69
A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID.
TI-2023-03529 CVE-2023-3776 · GHSA-fcg7-9x44-gx43
Use-after-free in Linux kernel's net/sched: cls_fw component
Priority LOW 37
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
TI-2023-03718 CVE-2023-4004 · GHSA-h3j8-wx8r-29j6
Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()
Priority LOW 36
A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END.
TI-2023-03563 CVE-2023-3812 · GHSA-v4mv-7g6h-5vh8
Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags
Priority LOW 36
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled.