Read the docs
Red Hat Security Advisory

RHSA-2024:1382

kernel-rt security and bug fix update

Released 2024-03-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 11 records

TI-2022-17805 CVE-2022-38096 · GHSA-4vrg-gm73-c852

There is a NULL pointer vulnerability in vmwgfx driver

Priority MEDIUM 61

A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00797 Published 2022-09-09 Partial fix CWE-476
TI-2024-00596 CVE-2024-0646 · GHSA-qmff-49xc-7rf6

Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

Priority LOW 36

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00308 Published 2024-01-17 Partial fix · 6.7-rc5, 4.18.0-513.18.1.rt7.320.el8_9 +29 CWE-787
TI-2023-03370 CVE-2023-3611 · GHSA-x5xp-6cpr-4xwx

Out-of-bounds write in Linux kernel's net/sched: sch_qfq component

Priority LOW 36

An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00293 Published 2023-07-21 Fixed in 6.5 CWE-787
TI-2023-02041 CVE-2023-2176 · GHSA-mx4p-25w4-ff2f

Out-of-bounds read in Kernel

Priority LOW 36

A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00238 Published 2023-04-20 Partial fix CWE-125
TI-2023-06229 CVE-2023-6817 · GHSA-j5r4-2mjg-6xcc

Use-after-free in Linux kernel's netfilter: nf_tables component

Priority LOW 34

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00334 Published 2023-12-18 Partial fix · 6.7 CWE-416
TI-2022-20207 CVE-2022-41858 · GHSA-5r4m-496r-7wqm

Use after free in Linux kernel

Priority LOW 33

A flaw was found in the Linux kernel.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0029 Published 2023-01-17 Partial fix CWE-416
TI-2023-06578 CVE-2023-7192 · GHSA-mmc5-hgpc-m8q5

Kernel: refcount leak in ctnetlink_create_conntrack()

Priority LOW 25

A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00298 Published 2024-01-02 Partial fix · 4.18.0-193.133.1.el8_2, 4.18.0-193.133.1.rt13.184.el8_2 +8 CWE-401
TI-2023-04117 CVE-2023-4459 · GHSA-p788-v6c7-5vqg

Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()

Priority LOW 24

A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00249 Published 2023-08-21 Partial fix · 4.18.0-193.133.1.el8_2, 4.18.0-193.133.1.rt13.184.el8_2 +5 CWE-476
TI-2023-02033 CVE-2023-2166 · GHSA-f7h3-2rcm-qw98

NULL pointer dereference in Linux

Priority LOW 24

A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.002 Published 2023-04-19 Partial fix CWE-476