Read the docs
Red Hat Security Advisory

RHSA-2024:0725

kernel-rt security update

Released 2024-02-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 10 records

TI-2023-06053 CVE-2023-6606 · GHSA-4m6w-vxqg-9rmm

Kernel: out-of-bounds read vulnerability in smbcalcsize

Priority MEDIUM 64

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00526 Published 2023-12-08 Partial fix · 4.18.0-513.18.1.rt7.320.el8_9, 4.18.0-513.18.1.el8_9 +22 CWE-125
TI-2024-00596 CVE-2024-0646 · GHSA-qmff-49xc-7rf6

Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

Priority LOW 36

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00308 Published 2024-01-17 Partial fix · 6.7-rc5, 4.18.0-513.18.1.rt7.320.el8_9 +29 CWE-787
TI-2023-06335 CVE-2023-6932 · GHSA-m2ff-6895-cr34

Use-after-free in Linux kernel's ipv4: igmp component

Priority LOW 36

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00367 Published 2023-12-19 Partial fix · 6.7 CWE-416
TI-2023-05991 CVE-2023-6536 · GHSA-xw3g-x45j-xxhh

Kernel: null pointer dereference in __nvmet_req_complete

Priority LOW 36

A flaw was found in the Linux kernel's NVMe driver.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01549 Published 2024-02-07 Partial fix · 4.18.0-513.18.1.rt7.320.el8_9, 4.18.0-513.18.1.el8_9 +22 CWE-476
TI-2023-05835 CVE-2023-6356 · GHSA-98fx-x879-qp6f

Kernel: null pointer dereference in nvmet_tcp_build_iovec

Priority LOW 36

A flaw was found in the Linux kernel's NVMe driver.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0146 Published 2024-02-07 Partial fix · 4.18.0-513.18.1.rt7.320.el8_9, 4.18.0-513.18.1.el8_9 +22 CWE-476
TI-2023-06057 CVE-2023-6610 · GHSA-jr4h-682w-x2ph

Kernel: oob access in smb2_dump_detail

Priority LOW 32

An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0043 Published 2023-12-08 Partial fix · 4.18.0-513.18.1.rt7.320.el8_9, 4.18.0-513.18.1.el8_9 +22 CWE-125
TI-2023-06578 CVE-2023-7192 · GHSA-mmc5-hgpc-m8q5

Kernel: refcount leak in ctnetlink_create_conntrack()

Priority LOW 25

A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00298 Published 2024-01-02 Partial fix · 4.18.0-193.133.1.el8_2, 4.18.0-193.133.1.rt13.184.el8_2 +8 CWE-401
TI-2023-01017 CVE-2023-1074 · GHSA-6f7j-jmxj-m9g3

Memory leak in kernel

Priority LOW 24

A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00238 Published 2023-03-27 Partial fix CWE-401