Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Vulnerabilities 4

• High 7.8
  CVE-2023-0461 Public exploit

  Use-after-free vulnerability in the Linux Kernel

  There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not …

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 28, 2023
• High 7.8
  CVE-2023-1281 Public exploit

  UAF in Linux kernel's tcindex (traffic control index filter) implementation

  Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the d…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Mar 22, 2023
• High 7.8
  CVE-2023-32233 Public exploit EPSS 13%

  In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux Alpine
  May 8, 2023
• High 7.5
  CVE-2023-1390

  A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_lin…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Mar 16, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2176192
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2178212
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2181847
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2196105
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4126.json
• report
  https://access.redhat.com/security/cve/CVE-2023-0461
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0461
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0461
• article
  https://github.com/torvalds/linux/commit/2c02d41d71f90a5168391b6a5f2954112ba2307c
• report
  https://access.redhat.com/security/cve/CVE-2023-1281
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1281
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1281
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ee059170b1f7e94e55fa6cadee544e176a6e59c2
• report
  https://access.redhat.com/security/cve/CVE-2023-1390
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1390
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1390
• article
  https://gist.github.com/netspooky/bee2d07022f6350bb88eaa48e571d9b5
• article
  https://infosec.exchange/@_mattata/109427999461122360
• report
  https://access.redhat.com/security/cve/CVE-2023-32233
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-32233
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-32233
• article
  https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab
• article
  https://www.openwall.com/lists/oss-security/2023/05/08/4