Red Hat Security AdvisoryRHSA-2023:7434
kernel security and bug fix update
Released 2023-11-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v. 8.2) bpftool-4.18.0-193.119.1.el8_2, kernel-4.18.0-193.119.1.el8_2, kernel-abi-whitelists-4.18.0-193.119.1.el8_2 +14
- Red Hat Enterprise Linux BaseOS E4S (v. 8.2) bpftool-4.18.0-193.119.1.el8_2, kernel-4.18.0-193.119.1.el8_2, kernel-abi-whitelists-4.18.0-193.119.1.el8_2 +14
- Red Hat Enterprise Linux BaseOS TUS (v. 8.2) bpftool-4.18.0-193.119.1.el8_2, kernel-4.18.0-193.119.1.el8_2, kernel-abi-whitelists-4.18.0-193.119.1.el8_2 +14
Fixes 4 records
Priority LOW 38
A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01056 · Published 2023-04-12 · Partial fix · 4.14.308, 4.19.276 +6 CWE-416
Priority LOW 37
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00508 · Published 2023-07-21 · Fixed in 6.5 CWE-416
Priority LOW 37
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00487 · Published 2023-07-21 · Partial fix · 4.14.322, 4.19.291 +6 CWE-416
Priority LOW 36
A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00917 · Published 2023-07-31 · Fixed in 4.18.0-477.27.1.rt7.290.el8_8, 4.18.0-477.27.1.el8_8 +9 CWE-416
THREATIST.IORead the docs