Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 85

Vulnerabilities 7

• High 7.8
  CVE-2023-2235

  Use-after-free in Linux kernel's Performance Events subsystem

  A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remo…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2023
• High 7.8
  CVE-2023-32233 Public exploit EPSS 13%

  In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux Alpine
  May 8, 2023
• High 7.1
  CVE-2023-54325

  crypto: qat - fix out-of-bounds read

  In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix out-of-bounds read When preparing an AER-CTR request, the driver copies the key provided by the user into a data structure that is accessible by the firmware. If the target …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 30, 2025
• High 7.0
  CVE-2023-28466

  do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race con…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 15, 2023
• Medium 6.7
  CVE-2023-2194

  An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->bl…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu Azure Linux
  Apr 20, 2023
• Unscored —
  CVE-2023-2002 Public exploit

  A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  May 26, 2023
• Unscored —
  CVE-2023-2124

  An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  May 15, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2179000
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187308
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187439
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2188396
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2192589
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2196105
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3723.json
• report
  https://access.redhat.com/security/cve/CVE-2023-2002
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2002
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2002
• article
  https://www.openwall.com/lists/oss-security/2023/04/16/3
• report
  https://access.redhat.com/security/cve/CVE-2023-2124
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2124
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2124
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/xfs/xfs_buf_item_recover.c?h=v6.4-rc1&id=22ed903eee23a5b174e240f1cdfa9acf393a5210
• article
  https://lore.kernel.org/linux-xfs/20230412214034.GL3223426@dread.disaster.area/T/#m1ebbcd1ad061d2d33bef6f0534a2b014744d152d
• report
  https://access.redhat.com/security/cve/CVE-2023-2194
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2194
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2194
• report
  https://access.redhat.com/security/cve/CVE-2023-2235
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2235
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2235
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fd0815f632c24878e325821943edccc7fde947a2
• report
  https://access.redhat.com/security/cve/CVE-2023-28466
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-28466
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-28466
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=49c47cc21b5b7a3d8deb18fc57b0aa2ab1286962
• report
  https://access.redhat.com/security/cve/CVE-2023-32233
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-32233
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-32233
• article
  https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab
• article
  https://www.openwall.com/lists/oss-security/2023/05/08/4
• report
  https://access.redhat.com/security/cve/CVE-2023-54325
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2426061
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-54325
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-54325
• article
  https://lore.kernel.org/linux-cve-announce/2025123016-CVE-2023-54325-3e5c@gregkh/T