TI-2023-22856 CVE-2023-42753 · GHSA-j66v-q82h-4f8h
Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
Priority HIGH 69
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel.
RHSA-2024:0461
kernel security update
Released 2024-01-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-362.18.1.el9_3, libperf-5.14.0-362.18.1.el9_3
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-362.18.1.el9_3, kernel-64k-debug-devel-matched-5.14.0-362.18.1.el9_3, kernel-64k-devel-5.14.0-362.18.1.el9_3 +11
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.2.0-362.18.1.el9_3, kernel-5.14.0-362.18.1.el9_3, kernel-64k-5.14.0-362.18.1.el9_3 +29
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-362.18.1.el9_3, kernel-rt-core-5.14.0-362.18.1.el9_3, kernel-rt-debug-5.14.0-362.18.1.el9_3 +9
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-362.18.1.el9_3, kernel-rt-core-5.14.0-362.18.1.el9_3, kernel-rt-debug-5.14.0-362.18.1.el9_3 +11
Fixes 17 records
TI-2023-04766 CVE-2023-5178 · GHSA-xr9j-c7v6-7542
Kernel: use after free in nvmet_tcp_free_crypto in nvme
Priority MEDIUM 50
A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel.
TI-2023-21125 CVE-2023-40283 · GHSA-cp56-rpr6-7673
An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux…
Priority LOW 37
An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10.
TI-2023-05184 CVE-2023-5633 · GHSA-3hmc-jxr7-rw7j
Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling
Priority LOW 36
The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface.
TI-2023-04262 CVE-2023-4623 · GHSA-j8c5-g64v-xj97
Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component
Priority LOW 36
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
TI-2023-03563 CVE-2023-3812 · GHSA-v4mv-7g6h-5vh8
Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags
Priority LOW 36
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled.
TI-2023-02041 CVE-2023-2176 · GHSA-mx4p-25w4-ff2f
Out-of-bounds read in Kernel
Priority LOW 36
A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel.
TI-2023-04261 CVE-2023-4622 · GHSA-hxpr-87wq-jwf8
Use-after-free in Linux kernel's af_unix component
Priority LOW 35
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
TI-2023-25284 CVE-2023-46813 · GHSA-w26h-mgrc-mcqq
An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with…
Priority LOW 34
An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers.
TI-2023-03727 CVE-2023-4015 · GHSA-5m5v-w78j-286f
Use-after-free in Linux kernel's netfilter: nf_tables component
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
TI-2023-03530 CVE-2023-3777 · GHSA-3v7f-rjgx-9grq
Use-after-free in Linux kernel's netfilter: nf_tables component
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
TI-2022-03264 CVE-2022-3545 · GHSA-xgm6-4c8q-9hmf
Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free
Priority LOW 34
A vulnerability has been found in Linux Kernel and classified as critical.
TI-2022-20207 CVE-2022-41858 · GHSA-5r4m-496r-7wqm
Use after free in Linux kernel
Priority LOW 33
A flaw was found in the Linux kernel.
TI-2022-16739 CVE-2022-36402 · GHSA-7xqj-7frw-hvvx
There is an int overflow vulnerability in vmwgfx driver
Priority LOW 29
An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'.
TI-2023-06109 CVE-2023-6679 · GHSA-9vh7-c87x-8q9v
Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c
Priority LOW 25
A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel.
TI-2023-19793 CVE-2023-38409 · GHSA-jrp6-94m7-j7gw
An issue was discovered in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the…
Priority LOW 24
An issue was discovered in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12.
TI-2023-02033 CVE-2023-2166 · GHSA-f7h3-2rcm-qw98
NULL pointer dereference in Linux
Priority LOW 24
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux.