Red Hat Security AdvisoryRHSA-2023:7423
kernel security update
Released 2023-11-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1160.105.1.el7, kernel-3.10.0-1160.105.1.el7, kernel-abi-whitelists-3.10.0-1160.105.1.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.105.1.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.105.1.el7
- Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1160.105.1.el7, kernel-3.10.0-1160.105.1.el7, kernel-abi-whitelists-3.10.0-1160.105.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1160.105.1.el7, kernel-tools-libs-devel-3.10.0-1160.105.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1160.105.1.el7, kernel-3.10.0-1160.105.1.el7, kernel-abi-whitelists-3.10.0-1160.105.1.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.105.1.el7
Fixes 7 records
Priority LOW 37
qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00598 · Published 2023-04-28 · Partial fix CWE-787
Priority LOW 37
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00508 · Published 2023-07-21 · Fixed in 6.5 CWE-416
Priority LOW 36
An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00293 · Published 2023-07-21 · Fixed in 6.5 CWE-787
Priority LOW 35
A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00588 · Published 2023-09-06 · Partial fix · 6.5 CWE-416
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00312 · Published 2023-09-06 · Partial fix · 6.5 CWE-416
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00313 · Published 2023-09-06 · Partial fix · 6.5 CWE-416
Priority LOW 34
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure…
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.03047 · Published 2023-08-11 · Partial fix CWE-1342
THREATIST.IORead the docs