Red Hat Security Advisory

RHSA-2024:1960

kpatch-patch security update

Released 2024-04-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7) kpatch-patch-3_10_0-1160_102_1-1-4.el7, kpatch-patch-3_10_0-1160_105_1-1-3.el7, kpatch-patch-3_10_0-1160_108_1-1-2.el7

Fixes 2 records

TI-2023-04262 CVE-2023-4623 · GHSA-j8c5-g64v-xj97

Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component

LOW 36

A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00283 Published 2023-09-06 Partial fix · 6.6 CWE-416

TI-2023-04261 CVE-2023-4622 · GHSA-hxpr-87wq-jwf8

Use-after-free in Linux kernel's af_unix component

LOW 35

A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00619 Published 2023-09-06 Partial fix · 4.14.324, 4.19.293 +6 CWE-416