Summary
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: ipvlan: out-of-bounds write caused by unclear skb->cb (CVE-2023-3090)
* kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788)
* kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869)
* kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458)
* kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 47
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | bpftool | 7.0.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-64k | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-64k-core | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-64k-debug | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-64k-debug-core | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-64k-debug-devel | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-64k-debug-devel-matched | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-64k-debug-modules | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-64k-debug-modules-core | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-64k-debug-modules-extra | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-64k-devel | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-64k-devel-matched | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-64k-modules | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-64k-modules-core | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-64k-modules-extra | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-abi-stablelists | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-core | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-cross-headers | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-debug | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-debug-core | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-debug-devel | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-debug-devel-matched | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-debug-modules | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-debug-modules-core | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-debug-modules-extra | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-debug-uki-virt | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-devel | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-devel-matched | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-doc | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-modules | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-modules-core | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-modules-extra | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-tools | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-tools-libs | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-tools-libs-devel | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-uki-virt | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-zfcpdump | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-zfcpdump-core | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-zfcpdump-devel | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-zfcpdump-devel-matched | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-zfcpdump-modules | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-zfcpdump-modules-core | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | kernel-zfcpdump-modules-extra | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | perf | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | python3-perf | 5.14.0-284.25.1.el9_2 |
| AlmaLinux · 9 | rtla | 5.14.0-284.25.1.el9_2 |
Vulnerabilities 5
-
High 7.8
Out-of-bounds write in Linux kernel's ipvlan network driver
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is r…
-
High 7.8CVE-2023-35788 Public exploit
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an o…
-
Medium 5.6CVE-2023-1998 Public exploit
Spectre v2 SMT mitigations problem in Linux kernel
The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp. We had noticed that on VMs of at least one major cloud provider, the kernel sti…
-
Medium 5.5
A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial o…
-
Medium 5.3
Spectre V1 Gadget in do_prlimit in the Linux Kernel
A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading…
References
-
report
https://access.redhat.com/security/cve/CVE-2022-45869
-
report
https://access.redhat.com/security/cve/CVE-2023-0458
-
report
https://access.redhat.com/security/cve/CVE-2023-1998
-
report
https://access.redhat.com/security/cve/CVE-2023-3090
-
report
https://access.redhat.com/security/cve/CVE-2023-35788
-
report
https://bugzilla.redhat.com/2151317
-
report
https://bugzilla.redhat.com/2187257
-
report
https://bugzilla.redhat.com/2193219
-
report
https://bugzilla.redhat.com/2215768
-
report
https://bugzilla.redhat.com/2218672
-
advisory
https://errata.almalinux.org/9/ALSA-2023-4377.html