Red Hat Security AdvisoryRHSA-2024:0897
kernel security update
Released 2024-02-20 · Red Hat rating Important · View on Red Hat →
Fixes 19 records
Priority MEDIUM 64
An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00526 · Published 2023-12-08 · Partial fix · 4.18.0-513.18.1.rt7.320.el8_9, 4.18.0-513.18.1.el8_9 +22 CWE-125
Priority LOW 38
A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00909 · Published 2023-10-25 · Partial fix · 6.6 CWE-787
Priority LOW 37
An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0055 · Published 2023-08-14 · Partial fix CWE-416
Priority LOW 36
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00308 · Published 2024-01-17 · Partial fix · 6.7-rc5, 4.18.0-513.18.1.rt7.320.el8_9 +29 CWE-787
Priority LOW 36
A flaw was found in the Linux kernel's NVMe driver.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01549 · Published 2024-02-07 · Partial fix · 4.18.0-513.18.1.rt7.320.el8_9, 4.18.0-513.18.1.el8_9 +22 CWE-476
Priority LOW 36
A flaw was found in the Linux kernel's NVMe driver.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01549 · Published 2024-02-07 · Partial fix · 4.18.0-513.18.1.rt7.320.el8_9, 4.18.0-513.18.1.el8_9 +22 CWE-476
Priority LOW 36
A flaw was found in the Linux kernel's NVMe driver.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0146 · Published 2024-02-07 · Partial fix · 4.18.0-513.18.1.rt7.320.el8_9, 4.18.0-513.18.1.el8_9 +22 CWE-476
Priority LOW 36
A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00419 · Published 2023-09-12 · Fixed in 6.6 CWE-416
Priority LOW 36
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00283 · Published 2023-09-06 · Partial fix · 6.6 CWE-416
Priority LOW 36
A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00238 · Published 2023-04-20 · Partial fix CWE-125
Priority LOW 34
An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00733 · Published 2023-10-27 · Partial fix
Priority LOW 34
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00635 · Published 2023-10-15 · Partial fix CWE-131
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00334 · Published 2023-12-18 · Partial fix · 6.7 CWE-416
Priority LOW 34
A vulnerability has been found in Linux Kernel and classified as critical.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00438 · Published 2022-10-17 · Partial fix CWE-119
Priority LOW 33
A flaw was found in the Linux kernel.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0029 · Published 2023-01-17 · Partial fix CWE-416
Priority LOW 32
An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0043 · Published 2023-12-08 · Partial fix · 4.18.0-513.18.1.rt7.320.el8_9, 4.18.0-513.18.1.el8_9 +22 CWE-125
Priority LOW 31
A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00251 · Published 2023-04-05 · Partial fix CWE-416
Priority LOW 31
A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a malicious USB device.
CVSS 3.1MEDIUM 6.6· Physical · Low privileges · No interaction · EPSS 0.00391 · Published 2023-03-27 · Partial fix CWE-119
Priority LOW 24
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.002 · Published 2023-04-19 · Partial fix CWE-476