TI-2023-22856 CVE-2023-42753 · GHSA-j66v-q82h-4f8h
Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
Priority HIGH 69
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel.
RHSA-2024:0593
kpatch-patch security update
Released 2024-01-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) kpatch-patch-4_18_0-305_103_1-1-3.el8_4, kpatch-patch-4_18_0-305_108_1-1-2.el8_4, kpatch-patch-4_18_0-305_114_1-1-1.el8_4 +1
Fixes 7 records
TI-2023-02031 CVE-2023-2163
Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation
Priority MEDIUM 55
Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.
TI-2023-04532 CVE-2023-4921 · GHSA-qw4m-2pv2-7r5f
Use-after-free in Linux kernel's net/sched: sch_qfq component
Priority LOW 36
A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
TI-2023-04262 CVE-2023-4623 · GHSA-j8c5-g64v-xj97
Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component
Priority LOW 36
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
TI-2023-03563 CVE-2023-3812 · GHSA-v4mv-7g6h-5vh8
Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags
Priority LOW 36
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled.
TI-2023-04261 CVE-2023-4622 · GHSA-hxpr-87wq-jwf8
Use-after-free in Linux kernel's af_unix component
Priority LOW 35
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
TI-2023-24625 CVE-2023-45871 · GHSA-67f2-j5vg-639w
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in…
Priority LOW 34
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3.