Red Hat Security AdvisoryRHSA-2024:0381
kpatch-patch security update
Released 2024-01-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) kpatch-patch-5_14_0-284_18_1-1-6.el9_2, kpatch-patch-5_14_0-284_25_1-1-5.el9_2, kpatch-patch-5_14_0-284_30_1-1-2.el9_2 +1
Fixes 5 records
Priority MEDIUM 55
Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.03635 · Published 2023-09-20 · Fixed CWE-682
Priority LOW 38
An improper input validation flaw was found in the eBPF subsystem in the Linux kernel.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00531 · Published 2023-10-04 · Partial fix · 5.14.0-362.8.1.el9_3, 5.14.0-284.48.1.el9_2 +1 CWE-20
Priority LOW 36
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00283 · Published 2023-09-06 · Partial fix · 6.6 CWE-416
Priority LOW 35
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00619 · Published 2023-09-06 · Partial fix · 4.14.324, 4.19.293 +6 CWE-416
Priority LOW 34
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00635 · Published 2023-10-15 · Partial fix CWE-131
THREATIST.IORead the docs