Red Hat Security Advisory

RHSA-2023:7417

kpatch-patch security update

Released 2023-11-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v. 8.2) kpatch-patch-4_18_0-193_109_1-1-3.el8_2, kpatch-patch-4_18_0-193_113_1-1-2.el8_2, kpatch-patch-4_18_0-193_116_1-1-1.el8_2

Fixes 4 records

TI-2023-01718 CVE-2023-1829 · GHSA-4x82-r4q4-7g8x

Use-after-free in tcindex (traffic control index filter) in the Linux Kernel

LOW 38

A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01056 Published 2023-04-12 Partial fix · 4.14.308, 4.19.276 +6 CWE-416

TI-2023-03529 CVE-2023-3776 · GHSA-fcg7-9x44-gx43

Use-after-free in Linux kernel's net/sched: cls_fw component

LOW 37

A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00508 Published 2023-07-21 Fixed in 6.5 CWE-416

TI-2023-03368 CVE-2023-3609 · GHSA-2qmp-8j6q-mcq6

Use-after-free in Linux kernel's net/sched: cls_u32 component

LOW 37

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00487 Published 2023-07-21 Partial fix · 4.14.322, 4.19.291 +6 CWE-416

TI-2023-03718 CVE-2023-4004 · GHSA-h3j8-wx8r-29j6

Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()

LOW 36

A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00917 Published 2023-07-31 Fixed in 4.18.0-477.27.1.rt7.290.el8_8, 4.18.0-477.27.1.el8_8 +9 CWE-416