Red Hat Security AdvisoryRHSA-2024:1188
kernel security, bug fix, and enhancement update
Released 2024-03-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.8.6) kernel-tools-libs-devel-4.18.0-372.95.1.el8_6
- Red Hat Enterprise Linux BaseOS EUS (v.8.6) bpftool-4.18.0-372.95.1.el8_6, kernel-4.18.0-372.95.1.el8_6, kernel-abi-stablelists-4.18.0-372.95.1.el8_6 +19
- Red Hat Virtualization 4 Hypervisor for RHEL 8 kernel-devel-4.18.0-372.95.1.el8_6, perf-4.18.0-372.95.1.el8_6
Fixes 14 records
Priority HIGH 72
A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation.
CVSS 4.0HIGH 8.6· Local · Low privileges · No interaction · EPSS 0.00504 · Published 2022-03-29 · Fixed in 5.4.177, 5.10.97 +3 CWE-416
Priority HIGH 69
Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free condi…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.009 · Published 2022-10-13 · Partial fix CWE-416
Priority MEDIUM 64
An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00526 · Published 2023-12-08 · Partial fix · 4.18.0-513.18.1.rt7.320.el8_9, 4.18.0-513.18.1.el8_9 +22 CWE-125
Priority MEDIUM 58
A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess location of exception stack(s) or other important data.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2023-02-23 · Partial fix CWE-200
Priority MEDIUM 58
A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, poten…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00645 · Published 2022-10-13 · Fixed CWE-835
Priority MEDIUM 42
An issue was discovered in the Linux kernel before 5.19.16.
CVSS 3.1HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.04144 · Published 2022-10-13 · Fixed CWE-787
Priority LOW 38
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel.
CVSS 3.1HIGH 7.4· Adjacent network · Low privileges · User interaction · EPSS 0.01999 · Published 2024-01-15 · Partial fix · 5.10.211, 5.15.150 +27 CWE-191
Priority LOW 34
A flaw was found in the Linux kernel's implementation of Pressure Stall Information.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00281 · Published 2022-08-23 · Partial fix CWE-416
Priority LOW 32
In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00247 · Published 2024-01-23 · Partial fix CWE-416
Priority LOW 32
In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00551 · Published 2021-11-17 · Partial fix CWE-787
Priority LOW 26
In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00601 · Published 2022-10-13 · Fixed CWE-476
Priority LOW 25
A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2024-01-02 · Partial fix · 4.18.0-193.133.1.el8_2, 4.18.0-193.133.1.rt13.184.el8_2 +8 CWE-401
Priority LOW 25
In drivers/hid/hid-elo.c in the Linux kernel before 5.16.11, a memory leak exists for a certain hid_parse error condition.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00381 · Published 2022-03-28 · Fixed CWE-401
Priority LOW 24
A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service (host OS crash or host OS memory corruption) when nested virtualisation and the TDP MMU are…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00258 · Published 2022-11-30 · Fixed CWE-362
THREATIST.IORead the docs