Red Hat Security Advisory: kpatch-patch security update

Fixed packages 18

Vulnerabilities 2

• High 7.8
  CVE-2023-1281 Public exploit

  UAF in Linux kernel's tcindex (traffic control index filter) implementation

  Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the d…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Mar 22, 2023
• High 7.8
  CVE-2023-32233 Public exploit EPSS 13%

  In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux Alpine
  May 8, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2181847
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2196105
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4145.json
• report
  https://access.redhat.com/security/cve/CVE-2023-1281
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1281
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1281
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ee059170b1f7e94e55fa6cadee544e176a6e59c2
• report
  https://access.redhat.com/security/cve/CVE-2023-32233
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-32233
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-32233
• article
  https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab
• article
  https://www.openwall.com/lists/oss-security/2023/05/08/4