Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 52

Vulnerabilities 4

• High 8.8
  CVE-2022-50493

  scsi: qla2xxx: Fix crash when I/O abort times out

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash when I/O abort times out While performing CPU hotplug, a crash with the following stack was seen: Call Trace: qla24xx_process_response_queue+0x42a/0x970 [qla2xxx] qla…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Oct 4, 2025
• High 7.8
  CVE-2023-1281 Public exploit

  UAF in Linux kernel's tcindex (traffic control index filter) implementation

  Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the d…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Mar 22, 2023
• High 7.8
  CVE-2023-32233 Public exploit EPSS 13%

  In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux Alpine
  May 8, 2023
• Medium 5.5
  CVE-2022-50396

  net: sched: fix memory leak in tcindex_set_parms

  In the Linux kernel, the following vulnerability has been resolved: net: sched: fix memory leak in tcindex_set_parms Syzkaller reports a memory leak as follows: ==================================== BUG: memory leak unreferenced object 0xffff88810c287f00 (size…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 18, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2181847
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2196105
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4130.json
• report
  https://access.redhat.com/security/cve/CVE-2022-50396
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2396378
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50396
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50396
• article
  https://lore.kernel.org/linux-cve-announce/2025091854-CVE-2022-50396-8b1b@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-50493
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2401516
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50493
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50493
• article
  https://lore.kernel.org/linux-cve-announce/2025100418-CVE-2022-50493-2b70@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-1281
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1281
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1281
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ee059170b1f7e94e55fa6cadee544e176a6e59c2
• report
  https://access.redhat.com/security/cve/CVE-2023-32233
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-32233
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-32233
• article
  https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab
• article
  https://www.openwall.com/lists/oss-security/2023/05/08/4