Summary
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: use after free in unix_stream_sendpage (CVE-2023-4622)
* kernel: vmwgfx: reference count issue leads to use-after-free in surface handling (CVE-2023-5633)
* kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753)
* Kernel: UAF during login when accessing the shost ipaddress (CVE-2023-2162)
* hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Backport OVS l4 Symmetric Hashing to almalinux-8 (JIRA:AlmaLinux-12746)
* Unbounded memory usage by TCP for receive buffers (JIRA:AlmaLinux-15096)
* various kind of guests freeze on rhel 8.8 (JIRA:AlmaLinux-15121)
* AlmaLinux 8: netfilter: conntrack: Fix gre tunneling over ipv6 (JIRA:AlmaLinux-15259)
* NFSv4.1 needs to handle ENOENT error from GETDEVICEINFO (JIRA:AlmaLinux-16407)
* DM multipath showing failed path for an nvme-o-FC LUN when performing I/O operations (JIRA:AlmaLinux-14718)
Fixed packages 24
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | bpftool | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-abi-stablelists | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-core | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-cross-headers | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-debug | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-debug-core | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-debug-devel | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-debug-modules | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-debug-modules-extra | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-devel | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-doc | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-modules | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-modules-extra | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-tools | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-tools-libs | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-tools-libs-devel | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-zfcpdump | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-zfcpdump-core | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-zfcpdump-devel | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-zfcpdump-modules | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | kernel-zfcpdump-modules-extra | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | perf | 4.18.0-513.11.1.el8_9 |
| AlmaLinux · 8 | python3-perf | 4.18.0-513.11.1.el8_9 |
Vulnerabilities 5
-
High 7.8CVE-2023-4622 Public exploit
Use-after-free in Linux kernel's af_unix component
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there…
-
High 7.8
Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling
The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration …
-
High 7.0
Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer o…
-
Medium 5.5
A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-compone…
-
Unscored —
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. …
References
-
report
https://access.redhat.com/security/cve/CVE-2023-20569
-
report
https://access.redhat.com/security/cve/CVE-2023-2162
-
report
https://access.redhat.com/security/cve/CVE-2023-42753
-
report
https://access.redhat.com/security/cve/CVE-2023-4622
-
report
https://access.redhat.com/security/cve/CVE-2023-5633
-
report
https://bugzilla.redhat.com/2187773
-
report
https://bugzilla.redhat.com/2207625
-
report
https://bugzilla.redhat.com/2237760
-
report
https://bugzilla.redhat.com/2239843
-
report
https://bugzilla.redhat.com/2245663
-
advisory
https://errata.almalinux.org/8/ALSA-2024-0113.html