Red Hat Security Advisory

RHSA-2024:0851

kpatch-patch security update

Released 2024-02-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v.8.6) kpatch-patch-4_18_0-372_64_1-1-5.el8_6, kpatch-patch-4_18_0-372_70_1-1-4.el8_6, kpatch-patch-4_18_0-372_75_1-1-3.el8_6 +2

Fixes 2 records

TI-2024-00596 CVE-2024-0646 · GHSA-qmff-49xc-7rf6

Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

LOW 36

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00308 Published 2024-01-17 Partial fix · 6.7-rc5, 4.18.0-513.18.1.rt7.320.el8_9 +29 CWE-787

TI-2023-04532 CVE-2023-4921 · GHSA-qw4m-2pv2-7r5f

Use-after-free in Linux kernel's net/sched: sch_qfq component

LOW 36

A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00419 Published 2023-09-12 Fixed in 6.6 CWE-416