High RHSA-2023:3853 2 CVEs

Red Hat Security Advisory: kpatch-patch security update

Published Sep 13, 2024 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 15

Release	Package	Fixed in
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	kpatch-patch-4_18_0-147_77_1	0:1-6.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	kpatch-patch-4_18_0-147_77_1-debuginfo	0:1-6.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	kpatch-patch-4_18_0-147_77_1-debugsource	0:1-6.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	kpatch-patch-4_18_0-147_78_1	0:1-5.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	kpatch-patch-4_18_0-147_78_1-debuginfo	0:1-5.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	kpatch-patch-4_18_0-147_78_1-debugsource	0:1-5.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	kpatch-patch-4_18_0-147_80_1	0:1-4.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	kpatch-patch-4_18_0-147_80_1-debuginfo	0:1-4.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	kpatch-patch-4_18_0-147_80_1-debugsource	0:1-4.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	kpatch-patch-4_18_0-147_81_1	0:1-3.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	kpatch-patch-4_18_0-147_81_1-debuginfo	0:1-3.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	kpatch-patch-4_18_0-147_81_1-debugsource	0:1-3.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	kpatch-patch-4_18_0-147_83_1	0:1-2.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	kpatch-patch-4_18_0-147_83_1-debuginfo	0:1-2.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	kpatch-patch-4_18_0-147_83_1-debugsource	0:1-2.el8_1

Vulnerabilities 2

High 7.8

CVE-2023-1281 Public exploit

UAF in Linux kernel's tcindex (traffic control index filter) implementation

Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the d…

Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Mar 22, 2023
High 7.8

CVE-2023-32233 Public exploit EPSS 13%

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux Alpine

May 8, 2023

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2181847
report
https://bugzilla.redhat.com/show_bug.cgi?id=2196105
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3853.json
report
https://access.redhat.com/security/cve/CVE-2023-1281
advisory
https://www.cve.org/CVERecord?id=CVE-2023-1281
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-1281
article
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ee059170b1f7e94e55fa6cadee544e176a6e59c2
report
https://access.redhat.com/security/cve/CVE-2023-32233
advisory
https://www.cve.org/CVERecord?id=CVE-2023-32233
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-32233
article
https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab
article
https://www.openwall.com/lists/oss-security/2023/05/08/4