Red Hat Security AdvisoryRHSA-2024:0431
kernel-rt security and bug fix update
Released 2024-01-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Real Time EUS (v.9.0) kernel-rt-5.14.0-70.85.1.rt21.156.el9_0, kernel-rt-core-5.14.0-70.85.1.rt21.156.el9_0, kernel-rt-debug-5.14.0-70.85.1.rt21.156.el9_0 +7
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.0) kernel-rt-5.14.0-70.85.1.rt21.156.el9_0, kernel-rt-core-5.14.0-70.85.1.rt21.156.el9_0, kernel-rt-debug-5.14.0-70.85.1.rt21.156.el9_0 +9
Fixes 12 records
Priority MEDIUM 50
A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.09617 · Published 2023-11-01 · Partial fix · 4.18.0-513.9.1.rt7.311.el8_9, 4.18.0-513.9.1.el8_9 +11 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress Bug report and analysis from Ding Hui.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00304 · Published 2025-03-27 · Partial fix · 5.10.248, 5.15.93 +2 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, usersp…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00292 · Published 2025-03-27 · Partial fix · 4.14.306, 4.19.273 +5 CWE-416
Priority LOW 36
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00283 · Published 2023-09-06 · Partial fix · 6.6 CWE-416
Priority LOW 34
An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00733 · Published 2023-10-27 · Partial fix
Priority LOW 34
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00635 · Published 2023-10-15 · Partial fix CWE-131
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00407 · Published 2023-09-06 · Partial fix · 6.5 CWE-416
Priority LOW 33
A flaw was found in the Linux kernel.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0029 · Published 2023-01-17 · Partial fix CWE-416
Priority LOW 32
A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00419 · Published 2023-07-24 · Partial fix · 4.18.0-553.rt7.342.el8_10, 4.18.0-553.el8_10 +7 CWE-416
Priority LOW 25
An issue was discovered in the Linux kernel through 5.18.14.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00319 · Published 2022-07-27 · Partial fix
Priority LOW 24
A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00249 · Published 2023-04-19 · Partial fix CWE-416
Priority LOW 24
A use-after-free flaw was found in reconn_set_ipaddr_from_hostname in fs/cifs/connect.c in the Linux kernel.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00208 · Published 2023-05-18 · Fixed CWE-416
THREATIST.IORead the docs