TI-2023-22856 CVE-2023-42753 · GHSA-j66v-q82h-4f8h
Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
Priority HIGH 69
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel.
RHSA-2024:0403
kernel security update
Released 2024-01-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v. 8.2) bpftool-4.18.0-193.120.1.el8_2, kernel-4.18.0-193.120.1.el8_2, kernel-abi-whitelists-4.18.0-193.120.1.el8_2 +14
- Red Hat Enterprise Linux BaseOS E4S (v. 8.2) bpftool-4.18.0-193.120.1.el8_2, kernel-4.18.0-193.120.1.el8_2, kernel-abi-whitelists-4.18.0-193.120.1.el8_2 +14
- Red Hat Enterprise Linux BaseOS TUS (v. 8.2) bpftool-4.18.0-193.120.1.el8_2, kernel-4.18.0-193.120.1.el8_2, kernel-abi-whitelists-4.18.0-193.120.1.el8_2 +14
Fixes 5 records
TI-2023-07042 CVE-2023-20593
Information disclosure through error messages in AMD Ryzen™ 3000 Series Desktop…
Priority MEDIUM 58
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
TI-2023-02031 CVE-2023-2163
Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation
Priority MEDIUM 55
Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.
TI-2023-04261 CVE-2023-4622 · GHSA-hxpr-87wq-jwf8
Use-after-free in Linux kernel's af_unix component
Priority LOW 35
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
TI-2023-02030 CVE-2023-2162 · GHSA-w379-vm3v-fj7p
Use after free in Kernel
Priority LOW 24
A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel.