Red Hat Security AdvisoryRHSA-2024:3414
kernel-rt security and bug fix update
Released 2024-05-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Real Time EUS (v.9.0) kernel-rt-5.14.0-70.101.1.rt21.173.el9_0, kernel-rt-core-5.14.0-70.101.1.rt21.173.el9_0, kernel-rt-debug-5.14.0-70.101.1.rt21.173.el9_0 +7
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.0) kernel-rt-5.14.0-70.101.1.rt21.173.el9_0, kernel-rt-core-5.14.0-70.101.1.rt21.173.el9_0, kernel-rt-debug-5.14.0-70.101.1.rt21.173.el9_0 +9
Fixes 6 records
Priority CRITICAL 93KEV
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.28058 · Published 2024-01-31 · Fixed in 6.8 CWE-416
Priority MEDIUM 62
A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00969 · Published 2024-02-04 · Partial fix · 4.18.0-553.5.1.rt7.346.el8_10, 4.18.0-553.5.1.el8_10 +5 CWE-203
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: exthdr: fix 4-byte stack OOB write If priv->len is a multiple of 4, then dst[len / 4] can write past the destination array which le…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00667 · Published 2024-03-28 · Partial fix · 4.19.316, 5.4.279 +5 CWE-787
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix stack corruption When tc filters are first added to a net device, the corresponding local port gets bound to an ACL group…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00247 · Published 2024-02-22 · Partial fix · 5.10.209, 5.15.148 +4 CWE-787
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00334 · Published 2023-12-18 · Partial fix · 6.7 CWE-416
Priority LOW 34
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00241 · Published 2023-09-06 · Partial fix · 4.19.316, 5.4.262 +4 CWE-416
THREATIST.IORead the docs