Red Hat Security AdvisoryRHSA-2023:7424
kernel-rt security update
Released 2023-11-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux for Real Time (v. 7) kernel-rt-3.10.0-1160.105.1.rt56.1256.el7, kernel-rt-debug-3.10.0-1160.105.1.rt56.1256.el7, kernel-rt-debug-devel-3.10.0-1160.105.1.rt56.1256.el7 +4
- Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-1160.105.1.rt56.1256.el7, kernel-rt-debug-3.10.0-1160.105.1.rt56.1256.el7, kernel-rt-debug-devel-3.10.0-1160.105.1.rt56.1256.el7 +7
Fixes 7 records
Priority LOW 37
qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00598 · Published 2023-04-28 · Partial fix CWE-787
Priority LOW 37
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00508 · Published 2023-07-21 · Fixed in 6.5 CWE-416
Priority LOW 36
An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00293 · Published 2023-07-21 · Fixed in 6.5 CWE-787
Priority LOW 35
A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00588 · Published 2023-09-06 · Partial fix · 6.5 CWE-416
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00312 · Published 2023-09-06 · Partial fix · 6.5 CWE-416
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00313 · Published 2023-09-06 · Partial fix · 6.5 CWE-416
Priority LOW 34
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure…
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.03047 · Published 2023-08-11 · Partial fix CWE-1342
THREATIST.IORead the docs