Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update

Fixed packages 2

Vulnerabilities 6

• High 8.2
  CVE-2023-1668

  A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow…

  openvswitch openvswitch openvswitch openvswitch Debian Ubuntu Azure Linux Alpine
  Apr 10, 2023
• High 8.1
  CVE-2022-38023

  Netlogon RPC Elevation of Privilege Vulnerability

  Netlogon RPC Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows Debian Ubuntu Azure Linux Alpine Wolfi
  Nov 9, 2022
• High 7.8
  CVE-2022-4378

  A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 5, 2023
• High 7.8
  CVE-2023-0461 Public exploit

  Use-after-free vulnerability in the Linux Kernel

  There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not …

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 28, 2023
• High 7.0
  CVE-2022-41222

  mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held dur…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 21, 2022
• Medium 5.5
  CVE-2022-3564 Public exploit

  Linux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after free

  A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommende…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Oct 17, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2137666
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2138818
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2150999
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2152548
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2154362
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2176192
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3491.json
• report
  https://access.redhat.com/security/cve/CVE-2022-3564
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-3564
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-3564
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=89f9f3cb86b1c63badaf392a83dd661d56cc50b1
• report
  https://access.redhat.com/security/cve/CVE-2022-4378
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-4378
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-4378
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-6.0/proc-avoid-integer-type-confusion-in-get_proc_long.patch
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-6.0/proc-proc_skip_spaces-shouldn-t-think-it-is-working-on-c-strings.patch
• article
  https://seclists.org/oss-sec/2022/q4/178
• report
  https://access.redhat.com/security/cve/CVE-2022-38023
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-38023
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-38023
• article
  https://www.samba.org/samba/security/CVE-2022-38023.html
• report
  https://access.redhat.com/security/cve/CVE-2022-41222
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-41222
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-41222
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=97113eb39fa7972722ff490b947d8af023e1f6a2
• report
  https://access.redhat.com/security/cve/CVE-2023-0461
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0461
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0461
• article
  https://github.com/torvalds/linux/commit/2c02d41d71f90a5168391b6a5f2954112ba2307c
• report
  https://access.redhat.com/security/cve/CVE-2023-1668
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1668
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1668
• article
  https://www.openwall.com/lists/oss-security/2023/04/06/1