Red Hat Security AdvisoryRHSA-2024:1607
kernel security, bug fix, and enhancement update
Released 2024-04-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-513.24.1.el8_9
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-513.24.1.el8_9, kernel-4.18.0-513.24.1.el8_9, kernel-abi-stablelists-4.18.0-513.24.1.el8_9 +19
Fixes 7 records
Priority CRITICAL 93KEV
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.28058 · Published 2024-01-31 · Fixed in 6.8 CWE-416
Priority MEDIUM 61
A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00797 · Published 2022-09-09 · Partial fix CWE-476
Priority LOW 38
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel.
CVSS 3.1HIGH 7.4· Adjacent network · Low privileges · User interaction · EPSS 0.01999 · Published 2024-01-15 · Partial fix · 5.10.211, 5.15.150 +27 CWE-191
Priority LOW 36
In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00319 · Published 2024-01-23 · Partial fix CWE-416
Priority LOW 35
A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00715 · Published 2023-12-19 · Partial fix · 4.19.302, 5.4.264 +5 CWE-787
Priority LOW 34
Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 b…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00371 · Published 2024-01-18 · Partial fix CWE-190
Priority LOW 32
A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00735 · Published 2023-12-21 · Partial fix · 4.18.0-513.24.1.rt7.326.el8_9, 4.18.0-513.24.1.el8_9 +28 CWE-366
THREATIST.IORead the docs