Red Hat Security AdvisoryRHSA-2024:0930
kernel security update
Released 2024-02-21 · Red Hat rating Important · View on Red Hat →
Fixes 18 records
Priority CRITICAL 93KEV
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.28058 · Published 2024-01-31 · Fixed in 6.8 CWE-416
Priority HIGH 69
Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00928 · Published 2022-05-17 · Partial fix · 5.18 CWE-911
Priority MEDIUM 61
A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00797 · Published 2022-09-09 · Partial fix CWE-476
Priority MEDIUM 40
A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00354 · Published 2023-01-09 · Partial fix · 5.4.233, 5.7.0 +4 CWE-1188
Priority LOW 36
In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00319 · Published 2024-01-23 · Partial fix CWE-416
Priority LOW 35
A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00715 · Published 2023-12-19 · Partial fix · 4.19.302, 5.4.264 +5 CWE-787
Priority LOW 34
A vulnerability was found in Linux Kernel.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00348 · Published 2022-10-21 · Fixed CWE-119
Priority LOW 34
A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for the Empia 28xx based TV cards.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00254 · Published 2022-09-19 · Fixed CWE-416
Priority LOW 33
Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00133 · Published 2022-08-11 · Partial fix
Priority LOW 32
A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00735 · Published 2023-12-21 · Partial fix · 4.18.0-513.24.1.rt7.326.el8_9, 4.18.0-513.24.1.el8_9 +28 CWE-366
Priority LOW 29
An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.0047 · Published 2023-04-10 · Partial fix CWE-754
Priority LOW 29
A use-after-free(UAF) vulnerability was found in function 'vmw_execbuf_tie_context' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00634 · Published 2022-09-09 · Partial fix CWE-416
Priority LOW 29
A use-after-free(UAF) vulnerability was found in function 'vmw_cmd_res_check' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00575 · Published 2022-09-09 · Partial fix CWE-416
Priority LOW 29
An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00603 · Published 2022-09-16 · Partial fix CWE-118
Priority LOW 29
When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00315 · Published 2022-07-18 · Partial fix CWE-787
Priority LOW 26
Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB.
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.00499 · Published 2022-03-12 · Partial fix
Priority LOW 25
An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0041 · Published 2023-04-24 · Partial fix CWE-833
Priority LOW 24
A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00238 · Published 2023-03-27 · Partial fix CWE-401
THREATIST.IORead the docs