Red Hat Security AdvisoryRHSA-2024:0402
kernel-rt security update
Released 2024-01-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Real Time TUS (v. 8.2) kernel-rt-4.18.0-193.120.1.rt13.171.el8_2, kernel-rt-core-4.18.0-193.120.1.rt13.171.el8_2, kernel-rt-debug-4.18.0-193.120.1.rt13.171.el8_2 +7
- Red Hat Enterprise Linux Real Time for NFV TUS (v. 8.2) kernel-rt-4.18.0-193.120.1.rt13.171.el8_2, kernel-rt-core-4.18.0-193.120.1.rt13.171.el8_2, kernel-rt-debug-4.18.0-193.120.1.rt13.171.el8_2 +9
Fixes 5 records
Priority HIGH 69
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00507 · Published 2023-09-25 · Partial fix · 3.10.0-1160.108.1.rt56.1259.el7, 3.10.0-1160.108.1.el7 +14 CWE-787
Priority MEDIUM 58
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.05066 · Published 2023-07-24 · Fixed CWE-209
Priority MEDIUM 55
Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.03635 · Published 2023-09-20 · Fixed CWE-682
Priority LOW 35
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00619 · Published 2023-09-06 · Partial fix · 4.14.324, 4.19.293 +6 CWE-416
Priority LOW 24
A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00249 · Published 2023-04-19 · Partial fix CWE-416