Summary
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe (CVE-2023-2163)
* kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags (CVE-2023-3812)
* kernel: use after free in nvmet_tcp_free_crypto in NVMe (CVE-2023-5178)
* kernel: use-after-free due to race condition occurring in dvb_register_device() (CVE-2022-45884)
* kernel: use-after-free due to race condition occurring in dvb_net.c (CVE-2022-45886)
* kernel: use-after-free due to race condition occurring in dvb_ca_en50221.c (CVE-2022-45919)
* kernel: use-after-free in smb2_is_status_io_timeout() (CVE-2023-1192)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Fix max integer mmu_invalidate_seq hanging vCPU (ALBZ#445)
* Random delay receiving packets after bringing up VLAN on top of VF with vf-vlan-pruning enabled (BZ#2240750)
* bpf_jit_limit hit again (BZ#2243011)
* HPE Edgeline 920t resets during kdump context when ice driver is loaded and when system is booted with intel_iommu=on iommu=pt (BZ#2244625)
Fixed packages 24
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | bpftool | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-abi-stablelists | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-core | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-cross-headers | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-debug | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-debug-core | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-debug-devel | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-debug-modules | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-debug-modules-extra | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-devel | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-doc | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-modules | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-modules-extra | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-tools | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-tools-libs | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-tools-libs-devel | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-zfcpdump | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-zfcpdump-core | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-zfcpdump-devel | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-zfcpdump-modules | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | kernel-zfcpdump-modules-extra | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | perf | 4.18.0-513.9.1.el8_9 |
| AlmaLinux · 8 | python3-perf | 4.18.0-513.9.1.el8_9 |
Vulnerabilities 7
-
Critical 10.0CVE-2023-2163 Public exploit
Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation
Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.
-
High 8.8CVE-2023-5178 Public exploit
Kernel: use after free in nvmet_tcp_free_crypto in nvme
A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, whic…
-
High 7.8
Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate …
-
Medium 6.5
Use-after-free in smb2_is_status_io_timeout()
A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses …
-
Unscored —
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, relate…
-
Unscored —
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dv…
-
Unscored —
An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-fre…
References
-
report
https://access.redhat.com/security/cve/CVE-2022-45884
-
report
https://access.redhat.com/security/cve/CVE-2022-45886
-
report
https://access.redhat.com/security/cve/CVE-2022-45919
-
report
https://access.redhat.com/security/cve/CVE-2023-1192
-
report
https://access.redhat.com/security/cve/CVE-2023-2163
-
report
https://access.redhat.com/security/cve/CVE-2023-3812
-
report
https://access.redhat.com/security/cve/CVE-2023-5178
-
report
https://bugzilla.redhat.com/2148510
-
report
https://bugzilla.redhat.com/2148517
-
report
https://bugzilla.redhat.com/2151956
-
report
https://bugzilla.redhat.com/2154178
-
report
https://bugzilla.redhat.com/2224048
-
report
https://bugzilla.redhat.com/2240249
-
report
https://bugzilla.redhat.com/2241924
-
advisory
https://errata.almalinux.org/8/ALSA-2023-7549.html