Read the docs
TI-2023-05998 Aliases CVE-2023-6546GHSA-v727-f437-6cxx

Kernel: gsm multiplexing race condition leads to privilege escalation

Priority LOW 32CWE-366Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 31 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.

Why it matters now

EPSS 0.00735 54th percentileScored 2026-11-07
Fix Partial Red Hat: 19 advisoriesRed Hat: 31 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatRed Hat Enterprise Linux 8—4.18.0-513.24.1.rt7.326.el8_9Patch availableCNA
Red HatRed Hat Enterprise Linux 8—4.18.0-513.24.1.el8_9Patch availableCNA
Red HatRed Hat Enterprise Linux 8——Not affectedCNA
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support—4.18.0-193.136.1.el8_2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—4.18.0-305.134.1.el8_4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service—4.18.0-305.134.1.rt7.210.el8_4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service—4.18.0-305.134.1.el8_4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions—4.18.0-305.134.1.el8_4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions——Not affectedCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support—4.18.0-372.93.1.el8_6Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support——Not affectedCNA
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support—4.18.0-477.55.1.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support——Not affectedCNA
Red HatRed Hat Enterprise Linux 9—5.14.0-427.13.1.el9_4Patch availableCNA
Red HatRed Hat Enterprise Linux 9—5.14.0-427.13.1.el9_4Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support—5.14.0-70.93.2.el9_0Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support—5.14.0-70.93.1.rt21.165.el9_0Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support——Not affectedCNA
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—5.14.0-284.55.1.el9_2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—5.14.0-284.55.1.rt14.340.el9_2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support——Not affectedCNA
Red HatRed Hat Virtualization 4 for Red Hat Enterprise Linux 8—4.18.0-372.93.1.el8_6Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.7.13-16Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.7.13-7Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v6.8.1-408Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.7.13-19Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v1.0.0-480Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.7.13-9Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v0.4.0-248Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v1.14.6-215Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v6.8.1-431Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v1.1.0-228Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.8.1-471Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v2.9.6-15Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.7.13-3Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.7.13-27Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v5.7.13-12Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v0.1.0-527Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v0.1.0-225Patch availableCNA
Red HatRHOL-5.7-RHEL-8—v0.28.1-57Patch availableCNA
Red HatRed Hat Enterprise Linux 6——Not affectedCNA
Red HatRed Hat Enterprise Linux 7——Not affectedCNA
Red HatRed Hat Enterprise Linux 7——Not affectedCNA
Red HatRed Hat Enterprise Linux 9——No fix listedCNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 4.18.0-513.24.1.rt7.326.el8_9 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 4.18.0-513.24.1.el8_9 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 4.18.0-193.136.1.el8_2 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 4.18.0-305.134.1.el8_4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 4.18.0-305.134.1.rt7.210.el8_4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 4.18.0-305.134.1.el8_4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 4.18.0-305.134.1.el8_4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support VendorRed Hat Affected — Fixed in 4.18.0-372.93.1.el8_6 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in 4.18.0-477.55.1.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 5.14.0-427.13.1.el9_4 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 5.14.0-427.13.1.el9_4 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Extended Update Support VendorRed Hat Affected — Fixed in 5.14.0-70.93.2.el9_0 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Extended Update Support VendorRed Hat Affected — Fixed in 5.14.0-70.93.1.rt21.165.el9_0 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Extended Update Support VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 5.14.0-284.55.1.el9_2 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 5.14.0-284.55.1.rt14.340.el9_2 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 4.18.0-372.93.1.el8_6 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.7.13-16 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.7.13-7 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v6.8.1-408 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.7.13-19 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v1.0.0-480 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.7.13-9 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v0.4.0-248 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v1.14.6-215 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v6.8.1-431 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v1.1.0-228 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.8.1-471 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v2.9.6-15 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.7.13-3 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.7.13-27 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v5.7.13-12 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v0.1.0-527 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v0.1.0-225 Patch available CNA
  • RHOL-5.7-RHEL-8 VendorRed Hat Affected — Fixed in v0.28.1-57 Patch available CNA
  • Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE configurations NVD · 10

CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*before 6.5VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*6.5 rc1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*6.5 rc2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*6.5 rc3VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*6.5 rc4VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*6.5 rc5VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.5:rc6:*:*:*:*:*:*6.5 rc6VulnerableLinux
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*39VulnerableFedoraproject
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:* Versions 6.5 rc1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:* Versions 6.5 rc2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:* Versions 6.5 rc3 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:* Versions 6.5 rc4 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:* Versions 6.5 rc5 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.5:rc6:*:*:*:*:*:* Versions 6.5 rc6 Vulnerable ·Linux
  • cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* Versions 39 Vulnerable ·Fedoraproject
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat

Remediation

Red Hat 19 advisories

  • RHSA-2024:4970 Released 2024-08-01 · Red Hat rating Important
    kpatch-patch-4_18_0-305_120_1 security update
    • Red Hat Enterprise Linux BaseOS E4S (v.8.4) kpatch-patch-4_18_0-305_120_1-1-3.el8_4
  • RHSA-2024:4731 Released 2024-07-23 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.134.1.el8_4, kernel-4.18.0-305.134.1.el8_4, kernel-abi-stablelists-4.18.0-305.134.1.el8_4 +14
    • Red Hat Enterprise Linux BaseOS E4S (v.8.4) bpftool-4.18.0-305.134.1.el8_4, kernel-4.18.0-305.134.1.el8_4, kernel-abi-stablelists-4.18.0-305.134.1.el8_4 +14
    • Red Hat Enterprise Linux BaseOS TUS (v.8.4) bpftool-4.18.0-305.134.1.el8_4, kernel-4.18.0-305.134.1.el8_4, kernel-abi-stablelists-4.18.0-305.134.1.el8_4 +14
  • RHSA-2024:4729 Released 2024-07-23 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux NFV TUS (v.8.4) kernel-rt-4.18.0-305.134.1.rt7.210.el8_4, kernel-rt-core-4.18.0-305.134.1.rt7.210.el8_4, kernel-rt-debug-4.18.0-305.134.1.rt7.210.el8_4 +9
    • Red Hat Enterprise Linux RT TUS (v.8.4) kernel-rt-4.18.0-305.134.1.rt7.210.el8_4, kernel-rt-core-4.18.0-305.134.1.rt7.210.el8_4, kernel-rt-debug-4.18.0-305.134.1.rt7.210.el8_4 +7
Show 16 more Red Hat advisories
  • RHSA-2024:4577 Released 2024-07-16 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) bpftool-4.18.0-193.136.1.el8_2, kernel-4.18.0-193.136.1.el8_2, kernel-abi-whitelists-4.18.0-193.136.1.el8_2 +14
  • RHSA-2024:2697 Released 2024-05-06 · Red Hat rating Important
    kpatch-patch security update
    • Red Hat Enterprise Linux BaseOS EUS (v.8.8) kpatch-patch-4_18_0-477_36_1-1-3.el8_8, kpatch-patch-4_18_0-477_43_1-1-2.el8_8
  • RHSA-2024:2093 Released 2024-05-01 · Red Hat rating Moderate
    security update Logging for Red Hat OpenShift - 5.7.13
    • RHOL 5.7 for RHEL 8 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel8-operator, openshift-logging/elasticsearch-operator-bundle +15
  • RHSA-2024:2621 Released 2024-04-30 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat CodeReady Linux Builder EUS (v.8.8) kernel-tools-libs-devel-4.18.0-477.55.1.el8_8
    • Red Hat Enterprise Linux BaseOS EUS (v.8.8) bpftool-4.18.0-477.55.1.el8_8, kernel-4.18.0-477.55.1.el8_8, kernel-abi-stablelists-4.18.0-477.55.1.el8_8 +19
  • RHSA-2024:2394 Released 2024-04-30 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-427.13.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.13.1.el9_4, kernel-64k-devel-5.14.0-427.13.1.el9_4 +11
    • Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.3.0-427.13.1.el9_4, kernel-5.14.0-427.13.1.el9_4, kernel-64k-5.14.0-427.13.1.el9_4 +29
    • Red Hat Enterprise Linux CRB (v. 9) kernel-tools-libs-devel-5.14.0-427.13.1.el9_4, libperf-5.14.0-427.13.1.el9_4
    • Red Hat Enterprise Linux NFV (v. 9) kernel-rt-5.14.0-427.13.1.el9_4, kernel-rt-core-5.14.0-427.13.1.el9_4, kernel-rt-debug-5.14.0-427.13.1.el9_4 +11
    • Red Hat Enterprise Linux RT (v. 9) kernel-rt-5.14.0-427.13.1.el9_4, kernel-rt-core-5.14.0-427.13.1.el9_4, kernel-rt-debug-5.14.0-427.13.1.el9_4 +9
  • RHSA-2024:1614 Released 2024-04-02 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-513.24.1.rt7.326.el8_9, kernel-rt-core-4.18.0-513.24.1.rt7.326.el8_9, kernel-rt-debug-4.18.0-513.24.1.rt7.326.el8_9 +9
    • Red Hat Enterprise Linux for Real Time (v. 8) kernel-rt-4.18.0-513.24.1.rt7.326.el8_9, kernel-rt-core-4.18.0-513.24.1.rt7.326.el8_9, kernel-rt-debug-4.18.0-513.24.1.rt7.326.el8_9 +7
  • RHSA-2024:1607 Released 2024-04-02 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-513.24.1.el8_9
    • Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-513.24.1.el8_9, kernel-4.18.0-513.24.1.el8_9, kernel-abi-stablelists-4.18.0-513.24.1.el8_9 +19
  • RHSA-2024:1612 Released 2024-04-02 · Red Hat rating Important
    kpatch-patch security update
    • Red Hat Enterprise Linux BaseOS (v. 8) kpatch-patch-4_18_0-513_11_1-1-2.el8_9, kpatch-patch-4_18_0-513_5_1-1-4.el8_9, kpatch-patch-4_18_0-513_9_1-1-3.el8_9
  • RHSA-2024:1306 Released 2024-03-13 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux Real Time EUS (v.9.0) kernel-rt-5.14.0-70.93.1.rt21.165.el9_0, kernel-rt-core-5.14.0-70.93.1.rt21.165.el9_0, kernel-rt-debug-5.14.0-70.93.1.rt21.165.el9_0 +7
    • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.0) kernel-rt-5.14.0-70.93.1.rt21.165.el9_0, kernel-rt-core-5.14.0-70.93.1.rt21.165.el9_0, kernel-rt-debug-5.14.0-70.93.1.rt21.165.el9_0 +9
  • RHSA-2024:1253 Released 2024-03-12 · Red Hat rating Important
    kernel live patch module security update
    • Red Hat Enterprise Linux BaseOS EUS (v.9.0) kpatch-patch-5_14_0-70_64_1-1-6.el9_0, kpatch-patch-5_14_0-70_70_1-1-5.el9_0, kpatch-patch-5_14_0-70_75_1-1-4.el9_0 +2
  • RHSA-2024:1250 Released 2024-03-12 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat CodeReady Linux Builder EUS (v.9.0) kernel-tools-libs-devel-5.14.0-70.93.2.el9_0
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) kernel-debug-devel-5.14.0-70.93.2.el9_0, kernel-debug-devel-matched-5.14.0-70.93.2.el9_0, kernel-devel-5.14.0-70.93.2.el9_0 +5
    • Red Hat Enterprise Linux BaseOS EUS (v.9.0) bpftool-5.14.0-70.93.2.el9_0, kernel-5.14.0-70.93.2.el9_0, kernel-abi-stablelists-5.14.0-70.93.2.el9_0 +14
  • RHSA-2024:1055 Released 2024-02-29 · Red Hat rating Important
    kpatch-patch security update
    • Red Hat Enterprise Linux BaseOS EUS (v.9.2) kpatch-patch-5_14_0-284_25_1-1-7.el9_2, kpatch-patch-5_14_0-284_30_1-1-4.el9_2, kpatch-patch-5_14_0-284_40_1-1-3.el9_2 +2
  • RHSA-2024:1018 Released 2024-02-28 · Red Hat rating Important
    kernel security update
    • Red Hat CodeReady Linux Builder EUS (v.9.2) kernel-tools-libs-devel-5.14.0-284.55.1.el9_2
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) kernel-64k-debug-devel-5.14.0-284.55.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.55.1.el9_2, kernel-64k-devel-5.14.0-284.55.1.el9_2 +10
    • Red Hat Enterprise Linux BaseOS EUS (v.9.2) bpftool-7.0.0-284.55.1.el9_2, kernel-5.14.0-284.55.1.el9_2, kernel-64k-5.14.0-284.55.1.el9_2 +29
  • RHSA-2024:1019 Released 2024-02-28 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux Real Time EUS (v.9.2) kernel-rt-5.14.0-284.55.1.rt14.340.el9_2, kernel-rt-core-5.14.0-284.55.1.rt14.340.el9_2, kernel-rt-debug-5.14.0-284.55.1.rt14.340.el9_2 +9
    • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2) kernel-rt-5.14.0-284.55.1.rt14.340.el9_2, kernel-rt-core-5.14.0-284.55.1.rt14.340.el9_2, kernel-rt-debug-5.14.0-284.55.1.rt14.340.el9_2 +11
  • RHSA-2024:0937 Released 2024-02-22 · Red Hat rating Important
    kpatch-patch security update
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) kpatch-patch-4_18_0-372_64_1-1-6.el8_6, kpatch-patch-4_18_0-372_70_1-1-5.el8_6, kpatch-patch-4_18_0-372_75_1-1-4.el8_6 +3
  • RHSA-2024:0930 Released 2024-02-21 · Red Hat rating Important
    kernel security update
    • Red Hat CodeReady Linux Builder EUS (v.8.6) kernel-tools-libs-devel-4.18.0-372.93.1.el8_6
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) bpftool-4.18.0-372.93.1.el8_6, kernel-4.18.0-372.93.1.el8_6, kernel-abi-stablelists-4.18.0-372.93.1.el8_6 +19
    • Red Hat Virtualization 4 Hypervisor for RHEL 8 kernel-devel-4.18.0-372.93.1.el8_6, perf-4.18.0-372.93.1.el8_6

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 9AffectedNo fix yet
RHOL 5.7 for RHEL 8Fixed RHSA-2024:2093
Red Hat CodeReady Linux Builder (v. 8)Fixed RHSA-2024:1607
Red Hat CodeReady Linux Builder EUS (v.8.6)Fixed RHSA-2024:0930
Red Hat CodeReady Linux Builder EUS (v.8.8)Fixed RHSA-2024:2621
Red Hat CodeReady Linux Builder EUS (v.9.0)Fixed RHSA-2024:1250
Red Hat CodeReady Linux Builder EUS (v.9.2)Fixed RHSA-2024:1018
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:2394
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2024:1250
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2024:1018
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2024:1607, RHSA-2024:1612
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2024:2394
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2024:4577
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2024:4731
Red Hat Enterprise Linux BaseOS E4S (v.8.4)Fixed RHSA-2024:4731, RHSA-2024:4970
Red Hat Enterprise Linux BaseOS EUS (v.8.6)Fixed RHSA-2024:0930, RHSA-2024:0937
Red Hat Enterprise Linux BaseOS EUS (v.8.8)Fixed RHSA-2024:2621, RHSA-2024:2697
Red Hat Enterprise Linux BaseOS EUS (v.9.0)Fixed RHSA-2024:1250, RHSA-2024:1253
Red Hat Enterprise Linux BaseOS EUS (v.9.2)Fixed RHSA-2024:1018, RHSA-2024:1055
Red Hat Enterprise Linux BaseOS TUS (v.8.4)Fixed RHSA-2024:4731
Red Hat Enterprise Linux CRB (v. 9)Fixed RHSA-2024:2394
Red Hat Enterprise Linux NFV (v. 9)Fixed RHSA-2024:2394
Red Hat Enterprise Linux NFV TUS (v.8.4)Fixed RHSA-2024:4729
Red Hat Enterprise Linux RT (v. 9)Fixed RHSA-2024:2394
Red Hat Enterprise Linux RT TUS (v.8.4)Fixed RHSA-2024:4729
Red Hat Enterprise Linux Real Time EUS (v.9.0)Fixed RHSA-2024:1306
Red Hat Enterprise Linux Real Time EUS (v.9.2)Fixed RHSA-2024:1019
Red Hat Enterprise Linux Real Time for NFV (v. 8)Fixed RHSA-2024:1614
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.0)Fixed RHSA-2024:1306
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)Fixed RHSA-2024:1019
Red Hat Enterprise Linux for Real Time (v. 8)Fixed RHSA-2024:1614
Red Hat Virtualization 4 Hypervisor for RHEL 8Fixed RHSA-2024:0930
Not affected: 3 products
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux AppStream EUS (v.9.2)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-6546
  2. 2026-10-03 Alias added: GHSA-v727-f437-6cxx

References

Patch 2

Advisory 20

Other 1

  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-10530 Code injection in [UNKNOWN] RichFaces KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-23530 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf… KEVCVSS 3.1CRITICAL 9.3
  • TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
See all 1955 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences