Red Hat Security AdvisoryRHSA-2024:0386
kpatch-patch security update
Released 2024-01-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS EUS (v.9.0) kpatch-patch-5_14_0-70_64_1-1-4.el9_0, kpatch-patch-5_14_0-70_70_1-1-3.el9_0, kpatch-patch-5_14_0-70_75_1-1-2.el9_0 +1
Fixes 3 records
Priority MEDIUM 50
A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.09617 · Published 2023-11-01 · Partial fix · 4.18.0-513.9.1.rt7.311.el8_9, 4.18.0-513.9.1.el8_9 +11 CWE-416
Priority LOW 36
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00283 · Published 2023-09-06 · Partial fix · 6.6 CWE-416
Priority LOW 34
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00635 · Published 2023-10-15 · Partial fix CWE-131
