TI-2024-00175 CVE-2024-0193 · GHSA-52x7-wcqq-wfjp
Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation
Priority HIGH 69
A use-after-free flaw was found in the netfilter subsystem of the Linux kernel.
RHSA-2024:4415
kernel security and bug fix update
Released 2024-07-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.0) kernel-debug-devel-5.14.0-70.105.1.el9_0, kernel-debug-devel-matched-5.14.0-70.105.1.el9_0, kernel-devel-5.14.0-70.105.1.el9_0 +5
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) bpftool-5.14.0-70.105.1.el9_0, kernel-5.14.0-70.105.1.el9_0, kernel-abi-stablelists-5.14.0-70.105.1.el9_0 +14
Fixes 5 records
TI-2024-17483 CVE-2024-26598 · GHSA-xfvp-h462-p6q2
KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a potential UAF scenario in the case of an LPI translation cache hit racing…
TI-2023-28782 CVE-2023-52434 · GHSA-23gm-fr88-2r8c
smb: client: fix potential OOBs in smb2_parse_contexts()
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2_parse_contexts() Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts().
TI-2024-23753 CVE-2024-35890 · GHSA-j82p-r65h-xx77
gro: fix ownership transfer
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: gro: fix ownership transfer If packets are GROed with fraglist they might be segmented later on and continue their journey in the stack.
TI-2024-17552 CVE-2024-26673 · GHSA-v854-7g2j-4x32
netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations - Disallow families other than NFPROTO_{IPV4,IPV6,INET}.