Read the docs
Red Hat Security Advisory

RHSA-2024:1269

kernel-rt security update

Released 2024-03-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 16 records

Priority MEDIUM 61

A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00797 Published 2022-09-09 Partial fix CWE-476
Priority MEDIUM 50

A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.09617 Published 2023-11-01 Partial fix · 4.18.0-513.9.1.rt7.311.el8_9, 4.18.0-513.9.1.el8_9 +11 CWE-416
TI-2023-17488 CVE-2023-35001 · GHSA-mw8f-fcpv-j495

Out-of-bounds write in Linux Kernel

Priority LOW 37

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01544 Published 2023-07-05 Fixed CWE-787
Priority LOW 36

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00308 Published 2024-01-17 Partial fix · 6.7-rc5, 4.18.0-513.18.1.rt7.320.el8_9 +29 CWE-787
Priority LOW 36

A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00419 Published 2023-09-12 Fixed in 6.6 CWE-416
Priority LOW 36

An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00293 Published 2023-07-21 Fixed in 6.5 CWE-787
Priority LOW 36

A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00914 Published 2023-06-28 Fixed in 4.14.322, 4.19.291 +5 CWE-416
Priority LOW 34

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00334 Published 2023-12-18 Partial fix · 6.7 CWE-416
Priority LOW 34

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.03047 Published 2023-08-11 Partial fix CWE-1342
TI-2022-20207 CVE-2022-41858 · GHSA-5r4m-496r-7wqm

Use after free in Linux kernel

Priority LOW 33

A flaw was found in the Linux kernel.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0029 Published 2023-01-17 Partial fix CWE-416