Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 25

Vulnerabilities 2

• High 7.8
  CVE-2023-1281 Public exploit

  UAF in Linux kernel's tcindex (traffic control index filter) implementation

  Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the d…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Mar 22, 2023
• High 7.8
  CVE-2023-32233 Public exploit EPSS 13%

  In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux Alpine
  May 8, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2181847
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2196105
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3852.json
• report
  https://access.redhat.com/security/cve/CVE-2023-1281
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1281
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1281
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ee059170b1f7e94e55fa6cadee544e176a6e59c2
• report
  https://access.redhat.com/security/cve/CVE-2023-32233
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-32233
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-32233
• article
  https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab
• article
  https://www.openwall.com/lists/oss-security/2023/05/08/4