Red Hat Security AdvisoryRHSA-2024:1367
kernel security and bug fix update
Released 2024-03-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.125.1.el8_4, kernel-4.18.0-305.125.1.el8_4, kernel-abi-stablelists-4.18.0-305.125.1.el8_4 +14
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) bpftool-4.18.0-305.125.1.el8_4, kernel-4.18.0-305.125.1.el8_4, kernel-abi-stablelists-4.18.0-305.125.1.el8_4 +14
- Red Hat Enterprise Linux BaseOS TUS (v.8.4) bpftool-4.18.0-305.125.1.el8_4, kernel-4.18.0-305.125.1.el8_4, kernel-abi-stablelists-4.18.0-305.125.1.el8_4 +14
Fixes 11 records
Priority MEDIUM 61
A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00797 · Published 2022-09-09 · Partial fix CWE-476
Priority LOW 37
qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00598 · Published 2023-04-28 · Partial fix CWE-787
Priority LOW 36
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00308 · Published 2024-01-17 · Partial fix · 6.7-rc5, 4.18.0-513.18.1.rt7.320.el8_9 +29 CWE-787
Priority LOW 36
An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00293 · Published 2023-07-21 · Fixed in 6.5 CWE-787
Priority LOW 36
A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00238 · Published 2023-04-20 · Partial fix CWE-125
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00334 · Published 2023-12-18 · Partial fix · 6.7 CWE-416
Priority LOW 34
A vulnerability has been found in Linux Kernel and classified as critical.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00438 · Published 2022-10-17 · Partial fix CWE-119
Priority LOW 33
A flaw was found in the Linux kernel.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0029 · Published 2023-01-17 · Partial fix CWE-416
Priority LOW 25
A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2024-01-02 · Partial fix · 4.18.0-193.133.1.el8_2, 4.18.0-193.133.1.rt13.184.el8_2 +8 CWE-401
Priority LOW 24
A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00249 · Published 2023-08-21 · Partial fix · 4.18.0-193.133.1.el8_2, 4.18.0-193.133.1.rt13.184.el8_2 +5 CWE-476
Priority LOW 24
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.002 · Published 2023-04-19 · Partial fix CWE-476
THREATIST.IORead the docs