TI-2024-00175 CVE-2024-0193 · GHSA-52x7-wcqq-wfjp
Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation
Priority HIGH 69
A use-after-free flaw was found in the netfilter subsystem of the Linux kernel.
RHSA-2024:1248
kernel security update
Released 2024-03-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-362.24.1.el9_3, libperf-5.14.0-362.24.1.el9_3
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-362.24.1.el9_3, kernel-64k-debug-devel-matched-5.14.0-362.24.1.el9_3, kernel-64k-devel-5.14.0-362.24.1.el9_3 +11
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.2.0-362.24.1.el9_3, kernel-5.14.0-362.24.1.el9_3, kernel-64k-5.14.0-362.24.1.el9_3 +29
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-362.24.1.el9_3, kernel-rt-core-5.14.0-362.24.1.el9_3, kernel-rt-debug-5.14.0-362.24.1.el9_3 +9
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-362.24.1.el9_3, kernel-rt-core-5.14.0-362.24.1.el9_3, kernel-rt-debug-5.14.0-362.24.1.el9_3 +11
Fixes 11 records
TI-2023-06053 CVE-2023-6606 · GHSA-4m6w-vxqg-9rmm
Kernel: out-of-bounds read vulnerability in smbcalcsize
Priority MEDIUM 64
An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel.
TI-2023-05260 CVE-2023-5717 · GHSA-gv6g-gf42-rjg7
Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component
Priority LOW 38
A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation.
TI-2024-00596 CVE-2024-0646 · GHSA-qmff-49xc-7rf6
Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination
Priority LOW 36
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination.
TI-2023-27902 CVE-2023-51042 · GHSA-5v7q-gqff-9cj8
In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in…
Priority LOW 36
In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free.
TI-2023-05991 CVE-2023-6536 · GHSA-xw3g-x45j-xxhh
Kernel: null pointer dereference in __nvmet_req_complete
Priority LOW 36
A flaw was found in the Linux kernel's NVMe driver.
TI-2023-05990 CVE-2023-6535 · GHSA-v8xr-j3gp-fmxj
Kernel: null pointer dereference in nvmet_tcp_execute_request
Priority LOW 36
A flaw was found in the Linux kernel's NVMe driver.
TI-2023-05835 CVE-2023-6356 · GHSA-98fx-x879-qp6f
Kernel: null pointer dereference in nvmet_tcp_build_iovec
Priority LOW 36
A flaw was found in the Linux kernel's NVMe driver.
TI-2023-06229 CVE-2023-6817 · GHSA-j5r4-2mjg-6xcc
Use-after-free in Linux kernel's netfilter: nf_tables component
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
TI-2023-03930 CVE-2023-4244 · GHSA-396p-373f-r9vm
Use-after-free in Linux kernel's netfilter: nf_tables component
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
TI-2023-06057 CVE-2023-6610 · GHSA-jr4h-682w-x2ph
Kernel: oob access in smb2_dump_detail
Priority LOW 32
An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel.