Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Vulnerabilities 6

• High 8.0
  CVE-2022-42896 Public exploit

  Info Leak in l2cap_core in the Linux Kernel

  There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker coul…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Nov 23, 2022
• High 7.8
  CVE-2023-2235

  Use-after-free in Linux kernel's Performance Events subsystem

  A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remo…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2023
• Unscored —
  CVE-2022-1016

  A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Aug 29, 2022
• Unscored —
  CVE-2022-42703 Public exploit

  mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Oct 9, 2022
• Unscored —
  CVE-2023-2002 Public exploit

  A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  May 26, 2023
• Unscored —
  CVE-2023-2124

  An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  May 15, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2066614
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2133483
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2147364
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187308
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187439
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2192589
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4138.json
• report
  https://access.redhat.com/security/cve/CVE-2022-1016
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1016
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1016
• article
  http://blog.dbouman.nl/2022/04/02/How-The-Tables-Have-Turned-CVE-2022-1015-1016/
• article
  https://seclists.org/oss-sec/2022/q1/205
• report
  https://access.redhat.com/security/cve/CVE-2022-42703
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-42703
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-42703
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2555283eb40df89945557273121e9393ef9b542b
• report
  https://access.redhat.com/security/cve/CVE-2022-42896
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-42896
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-42896
• article
  https://github.com/google/security-research/security/advisories/GHSA-pf87-6c9q-jvm4
• report
  https://access.redhat.com/security/cve/CVE-2023-2002
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2002
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2002
• article
  https://www.openwall.com/lists/oss-security/2023/04/16/3
• report
  https://access.redhat.com/security/cve/CVE-2023-2124
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2124
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2124
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/xfs/xfs_buf_item_recover.c?h=v6.4-rc1&id=22ed903eee23a5b174e240f1cdfa9acf393a5210
• article
  https://lore.kernel.org/linux-xfs/20230412214034.GL3223426@dread.disaster.area/T/#m1ebbcd1ad061d2d33bef6f0534a2b014744d152d
• report
  https://access.redhat.com/security/cve/CVE-2023-2235
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2235
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2235
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fd0815f632c24878e325821943edccc7fde947a2