Summary
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022-42896)
* kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation (CVE-2023-1281)
* kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter (CVE-2023-1829)
* kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events (CVE-2023-2235)
* kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124)
* kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | kernel-rt | 4.18.0-477.21.1.rt7.284.el8_8 |
| AlmaLinux · 8 | kernel-rt-core | 4.18.0-477.21.1.rt7.284.el8_8 |
| AlmaLinux · 8 | kernel-rt-debug | 4.18.0-477.21.1.rt7.284.el8_8 |
| AlmaLinux · 8 | kernel-rt-debug-core | 4.18.0-477.21.1.rt7.284.el8_8 |
| AlmaLinux · 8 | kernel-rt-debug-devel | 4.18.0-477.21.1.rt7.284.el8_8 |
| AlmaLinux · 8 | kernel-rt-debug-kvm | 4.18.0-477.21.1.rt7.284.el8_8 |
| AlmaLinux · 8 | kernel-rt-debug-modules | 4.18.0-477.21.1.rt7.284.el8_8 |
| AlmaLinux · 8 | kernel-rt-debug-modules-extra | 4.18.0-477.21.1.rt7.284.el8_8 |
| AlmaLinux · 8 | kernel-rt-devel | 4.18.0-477.21.1.rt7.284.el8_8 |
| AlmaLinux · 8 | kernel-rt-kvm | 4.18.0-477.21.1.rt7.284.el8_8 |
| AlmaLinux · 8 | kernel-rt-modules | 4.18.0-477.21.1.rt7.284.el8_8 |
| AlmaLinux · 8 | kernel-rt-modules-extra | 4.18.0-477.21.1.rt7.284.el8_8 |
Vulnerabilities 6
-
High 8.0CVE-2022-42896 Public exploit
Info Leak in l2cap_core in the Linux Kernel
There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker coul…
-
High 7.8CVE-2023-1281 Public exploit
UAF in Linux kernel's tcindex (traffic control index filter) implementation
Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the d…
-
High 7.8CVE-2023-1829 Public exploit
Use-after-free in tcindex (traffic control index filter) in the Linux Kernel
A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting…
-
High 7.8
Use-after-free in Linux kernel's Performance Events subsystem
A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remo…
-
Medium 6.7
An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->bl…
-
Unscored —
An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image…
References
-
report
https://access.redhat.com/security/cve/CVE-2022-42896
-
report
https://access.redhat.com/security/cve/CVE-2023-1281
-
report
https://access.redhat.com/security/cve/CVE-2023-1829
-
report
https://access.redhat.com/security/cve/CVE-2023-2124
-
report
https://access.redhat.com/security/cve/CVE-2023-2194
-
report
https://access.redhat.com/security/cve/CVE-2023-2235
-
report
https://bugzilla.redhat.com/2147364
-
report
https://bugzilla.redhat.com/2181847
-
report
https://bugzilla.redhat.com/2187439
-
report
https://bugzilla.redhat.com/2188396
-
report
https://bugzilla.redhat.com/2188470
-
report
https://bugzilla.redhat.com/2192589
-
advisory
https://errata.almalinux.org/8/ALSA-2023-4541.html