Red Hat Security Advisory

RHSA-2024:1323

kpatch-patch security update

Released 2024-03-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7) kpatch-patch-3_10_0-1160_102_1-1-3.el7, kpatch-patch-3_10_0-1160_105_1-1-2.el7, kpatch-patch-3_10_0-1160_108_1-1-1.el7 +1

Fixes 4 records

TI-2022-20892 CVE-2022-42896 · GHSA-pvw8-76h2-7q32

Info Leak in l2cap_core in the Linux Kernel

MEDIUM 45

There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotel…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02462 Published 2022-11-23 Partial fix CWE-416

TI-2023-15053 CVE-2023-31436 · GHSA-rwg2-cqg5-rjm4

qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an…

LOW 37

qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00598 Published 2023-04-28 Partial fix CWE-787

TI-2023-04532 CVE-2023-4921 · GHSA-qw4m-2pv2-7r5f

Use-after-free in Linux kernel's net/sched: sch_qfq component

LOW 36

A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00419 Published 2023-09-12 Fixed in 6.6 CWE-416

TI-2023-24625 CVE-2023-45871 · GHSA-67f2-j5vg-639w

An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in…

LOW 34

An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00635 Published 2023-10-15 Partial fix CWE-131