Read the docs
Red Hat Security Advisory

RHSA-2024:0881

kernel-rt security update

Released 2024-02-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 19 records

Priority MEDIUM 64

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00526 Published 2023-12-08 Partial fix · 4.18.0-513.18.1.rt7.320.el8_9, 4.18.0-513.18.1.el8_9 +22 CWE-125
Priority LOW 36

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00308 Published 2024-01-17 Partial fix · 6.7-rc5, 4.18.0-513.18.1.rt7.320.el8_9 +29 CWE-787
Priority LOW 36

A flaw was found in the Linux kernel's NVMe driver.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01549 Published 2024-02-07 Partial fix · 4.18.0-513.18.1.rt7.320.el8_9, 4.18.0-513.18.1.el8_9 +22 CWE-476
Priority LOW 36

A flaw was found in the Linux kernel's NVMe driver.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0146 Published 2024-02-07 Partial fix · 4.18.0-513.18.1.rt7.320.el8_9, 4.18.0-513.18.1.el8_9 +22 CWE-476
Priority LOW 36

A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00419 Published 2023-09-12 Fixed in 6.6 CWE-416
TI-2023-02041 CVE-2023-2176 · GHSA-mx4p-25w4-ff2f

Out-of-bounds read in Kernel

Priority LOW 36

A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00238 Published 2023-04-20 Partial fix CWE-125
Priority LOW 34

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00334 Published 2023-12-18 Partial fix · 6.7 CWE-416
TI-2022-20207 CVE-2022-41858 · GHSA-5r4m-496r-7wqm

Use after free in Linux kernel

Priority LOW 33

A flaw was found in the Linux kernel.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0029 Published 2023-01-17 Partial fix CWE-416
TI-2023-06057 CVE-2023-6610 · GHSA-jr4h-682w-x2ph

Kernel: oob access in smb2_dump_detail

Priority LOW 32

An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0043 Published 2023-12-08 Partial fix · 4.18.0-513.18.1.rt7.320.el8_9, 4.18.0-513.18.1.el8_9 +22 CWE-125
TI-2023-01726 CVE-2023-1838 · GHSA-rc9p-5gf8-h3m8

Use after free in Kernel

Priority LOW 31

A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00251 Published 2023-04-05 Partial fix CWE-416
TI-2023-01016 CVE-2023-1073 · GHSA-3chx-g7jg-4263

Memory corruption in kernel

Priority LOW 31

A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a malicious USB device.

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00391 Published 2023-03-27 Partial fix CWE-119
TI-2023-02033 CVE-2023-2166 · GHSA-f7h3-2rcm-qw98

NULL pointer dereference in Linux

Priority LOW 24

A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.002 Published 2023-04-19 Partial fix CWE-476