Red Hat Security Advisory

RHSA-2023:7419

kpatch-patch security update

Released 2023-11-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7) kpatch-patch-3_10_0-1160_102_1-1-1.el7, kpatch-patch-3_10_0-1160_90_1-1-4.el7, kpatch-patch-3_10_0-1160_92_1-1-4.el7 +2

TI-2023-03529 CVE-2023-3776 · GHSA-fcg7-9x44-gx43

LOW 37

A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00508 Published 2023-07-21 Fixed in 6.5 CWE-416

TI-2023-03370 CVE-2023-3611 · GHSA-x5xp-6cpr-4xwx

LOW 36

An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00293 Published 2023-07-21 Fixed in 6.5 CWE-787

TI-2023-03894 CVE-2023-4206 · GHSA-r8pm-459q-x6hw

LOW 35

A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00588 Published 2023-09-06 Partial fix · 6.5 CWE-416

TI-2023-03896 CVE-2023-4208 · GHSA-ph8p-rrmj-8gf2

LOW 34

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00312 Published 2023-09-06 Partial fix · 6.5 CWE-416

TI-2023-03895 CVE-2023-4207 · GHSA-4fhg-56x9-rf4r

LOW 34

A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00313 Published 2023-09-06 Partial fix · 6.5 CWE-416