Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel.
kernel security update
Released 2024-01-10 · Red Hat rating Important · View on Red Hat →
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel.
The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface.
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction.
An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'.
A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel.