Red Hat Security AdvisoryRHSA-2023:7749
kernel security update
Released 2023-12-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-362.13.1.el9_3, libperf-5.14.0-362.13.1.el9_3
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-362.13.1.el9_3, kernel-64k-debug-devel-matched-5.14.0-362.13.1.el9_3, kernel-64k-devel-5.14.0-362.13.1.el9_3 +11
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.2.0-362.13.1.el9_3, kernel-5.14.0-362.13.1.el9_3, kernel-64k-5.14.0-362.13.1.el9_3 +29
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-362.13.1.el9_3, kernel-rt-core-5.14.0-362.13.1.el9_3, kernel-rt-debug-5.14.0-362.13.1.el9_3 +9
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-362.13.1.el9_3, kernel-rt-core-5.14.0-362.13.1.el9_3, kernel-rt-debug-5.14.0-362.13.1.el9_3 +11
Fixes 7 records
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: x86/sev: Make enc_dec_hypercall() accept a size instead of npages enc_dec_hypercall() accepted a page count instead of a size, which forced its callers…
CVSS 3.1CRITICAL 9.3· Local · No auth · No interaction · EPSS 0.0011 · Published 2025-12-24 · Partial fix · 6.1.53, 6.4.16 +2
Priority LOW 37
A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00485 · Published 2023-10-03 · Fixed in 6.6 CWE-416
Priority LOW 34
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00635 · Published 2023-10-15 · Partial fix CWE-131
Priority LOW 32
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction.
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.07302 · Published 2023-08-08 · Partial fix CWE-203
Priority LOW 31
A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01104 · Published 2023-11-01 · Partial fix CWE-416
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: ice: Don't tx before switchdev is fully configured There is possibility that ice_eswitch_port_start_xmit might be called while some resources are still…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00157 · Published 2025-10-07 · Partial fix · 6.1.55, 6.5.5 +1 CWE-476
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: keys: Fix linking a duplicate key to a keyring's assoc_array When making a DNS query inside the kernel using dns_query(), the request code can in rare c…
CVSS — · EPSS 0.00205 · Published 2025-12-30 · Partial fix · 5.4.253, 5.10.188 +4
THREATIST.IORead the docs