Red Hat Security Advisory

RHSA-2024:2004

kernel security and bug fix update

Released 2024-04-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1160.118.1.el7, kernel-3.10.0-1160.118.1.el7, kernel-abi-whitelists-3.10.0-1160.118.1.el7 +8
Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.118.1.el7
Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.118.1.el7
Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1160.118.1.el7, kernel-3.10.0-1160.118.1.el7, kernel-abi-whitelists-3.10.0-1160.118.1.el7 +11
Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1160.118.1.el7, kernel-tools-libs-devel-3.10.0-1160.118.1.el7
Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1160.118.1.el7, kernel-3.10.0-1160.118.1.el7, kernel-abi-whitelists-3.10.0-1160.118.1.el7 +8
Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.118.1.el7

Fixes 5 records

TI-2023-11047 CVE-2023-25775 · GHSA-f38v-gw54-mx6w

Improper access control in Intel Ethernet Controller RDMA driver for linux

MEDIUM 44

Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01052 Published 2023-08-11 Partial fix CWE-284

TI-2023-04262 CVE-2023-4623 · GHSA-j8c5-g64v-xj97

Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component

LOW 36

A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00283 Published 2023-09-06 Partial fix · 6.6 CWE-416

TI-2023-04261 CVE-2023-4622 · GHSA-hxpr-87wq-jwf8

Use-after-free in Linux kernel's af_unix component

LOW 35

A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00619 Published 2023-09-06 Partial fix · 4.14.324, 4.19.293 +6 CWE-416

TI-2023-01884 CVE-2023-2002 · GHSA-vp9w-43wr-g8fj

Incorrect authorization in Kernel

LOW 33

A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel.

CVSS 3.1MEDIUM 6.8 Adjacent network Low privileges No interaction EPSS 0.0147 Published 2023-05-26 Fixed CWE-250

TI-2020-18786 CVE-2020-36558 · GHSA-jhg9-9m4g-q544

A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a…

LOW 23

A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.0031 Published 2022-07-21 Partial fix CWE-362