TI-2024-00175 CVE-2024-0193 · GHSA-52x7-wcqq-wfjp
Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation
Priority HIGH 69
A use-after-free flaw was found in the netfilter subsystem of the Linux kernel.
RHSA-2024:4412
kernel-rt security and bug fix update
Released 2024-07-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux NFV E4S (v.9.0) kernel-rt-5.14.0-70.105.1.rt21.177.el9_0, kernel-rt-core-5.14.0-70.105.1.rt21.177.el9_0, kernel-rt-debug-5.14.0-70.105.1.rt21.177.el9_0 +9
- Red Hat Enterprise Linux Real Time E4S (v.9.0) kernel-rt-5.14.0-70.105.1.rt21.177.el9_0, kernel-rt-core-5.14.0-70.105.1.rt21.177.el9_0, kernel-rt-debug-5.14.0-70.105.1.rt21.177.el9_0 +7
Fixes 3 records
TI-2023-28782 CVE-2023-52434 · GHSA-23gm-fr88-2r8c
smb: client: fix potential OOBs in smb2_parse_contexts()
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2_parse_contexts() Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts().
TI-2024-17552 CVE-2024-26673 · GHSA-v854-7g2j-4x32
netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations - Disallow families other than NFPROTO_{IPV4,IPV6,INET}.