Red Hat Security Advisory

RHSA-2024:2003

kernel-rt security update

Released 2024-04-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux for Real Time (v. 7) kernel-rt-3.10.0-1160.118.1.rt56.1269.el7, kernel-rt-debug-3.10.0-1160.118.1.rt56.1269.el7, kernel-rt-debug-devel-3.10.0-1160.118.1.rt56.1269.el7 +4
Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-1160.118.1.rt56.1269.el7, kernel-rt-debug-3.10.0-1160.118.1.rt56.1269.el7, kernel-rt-debug-devel-3.10.0-1160.118.1.rt56.1269.el7 +7

Fixes 5 records

TI-2023-11047 CVE-2023-25775 · GHSA-f38v-gw54-mx6w

Improper access control in Intel Ethernet Controller RDMA driver for linux

MEDIUM 44

Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01052 Published 2023-08-11 Partial fix CWE-284

TI-2023-04262 CVE-2023-4623 · GHSA-j8c5-g64v-xj97

Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component

LOW 36

A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00283 Published 2023-09-06 Partial fix · 6.6 CWE-416

TI-2023-04261 CVE-2023-4622 · GHSA-hxpr-87wq-jwf8

Use-after-free in Linux kernel's af_unix component

LOW 35

A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00619 Published 2023-09-06 Partial fix · 4.14.324, 4.19.293 +6 CWE-416

TI-2023-01884 CVE-2023-2002 · GHSA-vp9w-43wr-g8fj

Incorrect authorization in Kernel

LOW 33

A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel.

CVSS 3.1MEDIUM 6.8 Adjacent network Low privileges No interaction EPSS 0.0147 Published 2023-05-26 Fixed CWE-250

TI-2020-18786 CVE-2020-36558 · GHSA-jhg9-9m4g-q544

A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a…

LOW 23

A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.0031 Published 2022-07-21 Partial fix CWE-362