Read the docs
Red Hat Security Advisory

RHSA-2024:3528

kernel security update

Released 2024-05-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2024-01007 CVE-2024-1086 · GHSA-gfh2-2mj9-m2cx

Use-after-free in Linux kernel's netfilter: nf_tables component

Priority CRITICAL 93KEV

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.28058 Published 2024-01-31 Fixed in 6.8 CWE-416
TI-2023-02041 CVE-2023-2176 · GHSA-mx4p-25w4-ff2f

Out-of-bounds read in Kernel

Priority LOW 36

A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00238 Published 2023-04-20 Partial fix CWE-125
TI-2023-28920 CVE-2023-52578 · GHSA-3jh7-wc4v-w78v

net: bridge: use DEV_STATS_INC()

Priority LOW 30

In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV_STATS_INC() syzbot/KCSAN reported data-races in br_handle_frame_finish() [1] This function can run from multiple cpus without mutua…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0019 Published 2024-03-02 Partial fix · 4.19.296, 5.4.258 +5 CWE-362
TI-2023-02033 CVE-2023-2166 · GHSA-f7h3-2rcm-qw98

NULL pointer dereference in Linux

Priority LOW 24

A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.002 Published 2023-04-19 Partial fix CWE-476