Summary
[4.18.0-477.21.1_8.OL8]
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Tamas Koczka) {CVE-2022-42896}
- net/sched: tcindex: update imperfect hash filters respecting rcu (Jamal Hadi Salim) {CVE-2023-1281}
- net/sched: tcindex: search key must be 16 bits (Jamal Hadi Salim) {CVE-2023-1281}
- net/sched: Retire tcindex classifier (Jamal Hadi Salim) {CVE-2023-1829}
- xfs: verify buffer contents when we skip log replay (Darrick J. Wong) {CVE-2023-2124}
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Wei Chen) {CVE-2023-2194}
- perf: Fix check before add_event_to_groups() in perf_group_detach() (Budimir Markovic) {CVE-2023-2235}
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-abi-stablelists | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-core | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-cross-headers | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-debug | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-debug-core | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-debug-devel | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-debug-modules | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-debug-modules-extra | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-devel | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-doc | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-headers | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-modules | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-modules-extra | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-tools | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-tools-libs | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | kernel-tools-libs-devel | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | perf | 0:4.18.0-477.21.1.el8_8 |
| Oracle Linux · 8 | python3-perf | 0:4.18.0-477.21.1.el8_8 |
Vulnerabilities 6
-
High 8.0CVE-2022-42896 Public exploit
Info Leak in l2cap_core in the Linux Kernel
There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker coul…
-
High 7.8CVE-2023-1281 Public exploit
UAF in Linux kernel's tcindex (traffic control index filter) implementation
Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the d…
-
High 7.8CVE-2023-1829 Public exploit
Use-after-free in tcindex (traffic control index filter) in the Linux Kernel
A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting…
-
High 7.8
Use-after-free in Linux kernel's Performance Events subsystem
A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remo…
-
Medium 6.7
An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->bl…
-
Unscored —
An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image…