Red Hat Security Advisory

RHSA-2024:1831

kernel security update

Released 2024-04-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 6 ELS) kernel-2.6.32-754.53.1.el6, kernel-abi-whitelists-2.6.32-754.53.1.el6, kernel-debug-2.6.32-754.53.1.el6 +7
Red Hat Enterprise Linux Server Optional (v. 6 ELS) python-perf-2.6.32-754.53.1.el6

TI-2023-15053 CVE-2023-31436 · GHSA-rwg2-cqg5-rjm4

LOW 37

qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00598 Published 2023-04-28 Partial fix CWE-787

TI-2023-03529 CVE-2023-3776 · GHSA-fcg7-9x44-gx43

LOW 37

A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00508 Published 2023-07-21 Fixed in 6.5 CWE-416

TI-2023-04532 CVE-2023-4921 · GHSA-qw4m-2pv2-7r5f

LOW 36

A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00419 Published 2023-09-12 Fixed in 6.6 CWE-416

TI-2023-03370 CVE-2023-3611 · GHSA-x5xp-6cpr-4xwx

LOW 36

An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00293 Published 2023-07-21 Fixed in 6.5 CWE-787