Red Hat Security AdvisoryRHSA-2024:0134
kernel-rt security update
Released 2024-01-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-513.11.1.rt7.313.el8_9, kernel-rt-core-4.18.0-513.11.1.rt7.313.el8_9, kernel-rt-debug-4.18.0-513.11.1.rt7.313.el8_9 +9
- Red Hat Enterprise Linux for Real Time (v. 8) kernel-rt-4.18.0-513.11.1.rt7.313.el8_9, kernel-rt-core-4.18.0-513.11.1.rt7.313.el8_9, kernel-rt-debug-4.18.0-513.11.1.rt7.313.el8_9 +7
Fixes 6 records
Priority HIGH 69
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00507 · Published 2023-09-25 · Partial fix · 3.10.0-1160.108.1.rt56.1259.el7, 3.10.0-1160.108.1.el7 +14 CWE-787
Priority LOW 36
The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00278 · Published 2023-10-23 · Partial fix · 4.18.0-513.11.1.rt7.313.el8_9, 4.18.0-513.11.1.el8_9 +4 CWE-911
Priority LOW 35
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00619 · Published 2023-09-06 · Partial fix · 4.14.324, 4.19.293 +6 CWE-416
Priority LOW 32
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction.
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.07302 · Published 2023-08-08 · Partial fix CWE-203
Priority LOW 29
An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00603 · Published 2022-09-16 · Partial fix CWE-118
Priority LOW 24
A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00249 · Published 2023-04-19 · Partial fix CWE-416