Red Hat Security AdvisoryRHSA-2024:1018
kernel security update
Released 2024-02-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.2) kernel-tools-libs-devel-5.14.0-284.55.1.el9_2
- Red Hat Enterprise Linux AppStream EUS (v.9.2) kernel-64k-debug-devel-5.14.0-284.55.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.55.1.el9_2, kernel-64k-devel-5.14.0-284.55.1.el9_2 +10
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) bpftool-7.0.0-284.55.1.el9_2, kernel-5.14.0-284.55.1.el9_2, kernel-64k-5.14.0-284.55.1.el9_2 +29
Fixes 11 records
Priority CRITICAL 93KEV
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.28058 · Published 2024-01-31 · Fixed in 6.8 CWE-416
Priority HIGH 69
A use-after-free flaw was found in the netfilter subsystem of the Linux kernel.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00836 · Published 2024-01-02 · Partial fix · 5.14.0-362.24.1.el9_3, 5.14.0-70.105.1.el9_0 +20 CWE-416
Priority MEDIUM 61
A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00797 · Published 2022-09-09 · Partial fix CWE-476
Priority LOW 36
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00282 · Published 2024-01-31 · Partial fix · 6.8 CWE-416
Priority LOW 36
In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00319 · Published 2024-01-23 · Partial fix CWE-416
Priority LOW 35
A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00715 · Published 2023-12-19 · Partial fix · 4.19.302, 5.4.264 +5 CWE-787
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00334 · Published 2023-12-18 · Partial fix · 6.7 CWE-416
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00241 · Published 2023-09-06 · Partial fix · 4.19.316, 5.4.262 +4 CWE-416
Priority LOW 32
In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00247 · Published 2024-01-23 · Partial fix CWE-416
Priority LOW 32
A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00735 · Published 2023-12-21 · Partial fix · 4.18.0-513.24.1.rt7.326.el8_9, 4.18.0-513.24.1.el8_9 +28 CWE-366
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't skip expired elements during walk There is an asymmetry between commit/abort and preparation phase if the following conditio…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00215 · Published 2025-02-05 · Partial fix · 4.19.316, 5.4.262 +5
THREATIST.IORead the docs