TI-2023-22856 CVE-2023-42753 · GHSA-j66v-q82h-4f8h
Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
Priority HIGH 69
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel.
RHSA-2023:7539
kernel security, bug fix, and enhancement update
Released 2023-11-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.8.8) kernel-tools-libs-devel-4.18.0-477.36.1.el8_8
- Red Hat Enterprise Linux BaseOS EUS (v.8.8) bpftool-4.18.0-477.36.1.el8_8, kernel-4.18.0-477.36.1.el8_8, kernel-abi-stablelists-4.18.0-477.36.1.el8_8 +19
Fixes 20 records
TI-2023-03368 CVE-2023-3609 · GHSA-2qmp-8j6q-mcq6
Use-after-free in Linux kernel's net/sched: cls_u32 component
Priority LOW 37
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.
TI-2023-03894 CVE-2023-4206 · GHSA-r8pm-459q-x6hw
Use-after-free in Linux kernel's net/sched: cls_route component
Priority LOW 35
A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation.
TI-2022-26277 CVE-2022-50822 · GHSA-6mq5-qvxj-rwc8
RDMA/restrack: Release MR restrack when delete
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: RDMA/restrack: Release MR restrack when delete The MR restrack also needs to be released when delete it, otherwise it cause memory leak as the task stru…
TI-2023-03896 CVE-2023-4208 · GHSA-ph8p-rrmj-8gf2
Use-after-free in Linux kernel's net/sched: cls_u32 component
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.
TI-2023-03895 CVE-2023-4207 · GHSA-4fhg-56x9-rf4r
Use-after-free in Linux kernel's net/sched: cls_fw component
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
TI-2022-19523 CVE-2022-40982
Observable discrepancy in Intel Processors
Priority LOW 34
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure…
TI-2023-01127 CVE-2023-1192 · GHSA-r277-j8m2-3x97
Use-after-free in smb2_is_status_io_timeout()
Priority LOW 31
A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel.
TI-2022-22678 CVE-2022-45886 · GHSA-r9cf-cv4j-26qv
An issue was discovered in the Linux kernel through 6.0.9.
Priority LOW 31
An issue was discovered in the Linux kernel through 6.0.9.
TI-2022-22676 CVE-2022-45884 · GHSA-cm4c-3ppf-f88f
An issue was discovered in the Linux kernel through 6.0.9.
Priority LOW 31
An issue was discovered in the Linux kernel through 6.0.9.
TI-2022-22703 CVE-2022-45919 · GHSA-68h2-hwxh-w85g
An issue was discovered in the Linux kernel through 6.0.10.
Priority LOW 30
An issue was discovered in the Linux kernel through 6.0.10.
TI-2023-29908 CVE-2023-53620 · GHSA-gjrx-w6pw-88ph
md: fix soft lockup in status_resync
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: md: fix soft lockup in status_resync status_resync() will calculate 'curr_resync - recovery_active' to show user a progress bar like following: [=======…
TI-2023-29589 CVE-2023-53299 · GHSA-hhmc-3cvv-pmfw
md/raid10: fix leak of 'r10bio->remaining' for recovery
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio->remaining' for recovery raid10_sync_request() will add 'r10bio->remaining' for both rdev and replacement rdev.
TI-2023-29414 CVE-2023-53114 · GHSA-w4hx-frhg-79jg
i40e: Fix kernel crash during reboot when adapter is in recovery mode
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: i40e: Fix kernel crash during reboot when adapter is in recovery mode If the driver detects during probe that firmware is in recovery mode then i40e_ini…
TI-2023-28905 CVE-2023-52562 · GHSA-j56h-xwg2-4wc2
mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy()
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() After the commit in Fixes:, if a module that created a slab cache does not re…
TI-2023-19793 CVE-2023-38409 · GHSA-jrp6-94m7-j7gw
An issue was discovered in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the…
Priority LOW 24
An issue was discovered in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12.
TI-2023-30568 CVE-2023-54294 · GHSA-cpq6-27xg-r565
md/raid10: fix memleak of md thread
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak of md thread In raid10_run(), if setup_conf() succeed and raid10_run() failed before setting 'mddev->thread', then in the error p…
TI-2023-30401 CVE-2023-54123 · GHSA-fggm-fgvr-h4xg
md/raid10: fix memleak for 'conf->bio_split'
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak for 'conf->bio_split' In the error path of raid10_run(), 'conf' need be freed, however, 'conf->bio_split' is missed and memory wi…
TI-2023-30116 CVE-2023-53832 · GHSA-f28c-m9h4-3wr6
md/raid10: fix null-ptr-deref in raid10_sync_request
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null-ptr-deref in raid10_sync_request init_resync() inits mempool and sets conf->have_replacemnt at the beginning of sync, close_sync() f…
TI-2023-04360 CVE-2023-4732 · GHSA-c9mw-vpxm-p7rq
Race condition in Red Hat Enterprise Linux 8
Priority LOW 21
A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel.