Red Hat Security AdvisoryRHSA-2024:0876
kpatch-patch security update
Released 2024-02-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) kpatch-patch-4_18_0-513_11_1-1-1.el8_9, kpatch-patch-4_18_0-513_5_1-1-3.el8_9, kpatch-patch-4_18_0-513_9_1-1-2.el8_9
Fixes 4 records
Priority LOW 36
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00308 · Published 2024-01-17 · Partial fix · 6.7-rc5, 4.18.0-513.18.1.rt7.320.el8_9 +29 CWE-787
Priority LOW 36
A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00419 · Published 2023-09-12 · Fixed in 6.6 CWE-416
Priority LOW 36
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00283 · Published 2023-09-06 · Partial fix · 6.6 CWE-416
Priority LOW 34
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00635 · Published 2023-10-15 · Partial fix CWE-131
THREATIST.IORead the docs