Skip to content
OpenAdvisories
High RHSA-2023:4517 8 CVEs

Red Hat Security Advisory: kernel security and bug fix update

Published Sep 25, 2024 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 43

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos bpftool 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos bpftool-debuginfo 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-abi-stablelists 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-core 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-core 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-debuginfo 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-devel 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-modules 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-modules-extra 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-aarch64 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-ppc64le 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-s390x 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-x86_64 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-devel 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-doc 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-modules 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-modules-extra 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-tools 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-tools-debuginfo 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-tools-libs 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-core 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-debuginfo 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-devel 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-modules 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-modules-extra 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos perf 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos perf-debuginfo 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-perf 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-perf-debuginfo 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::crb bpftool-debuginfo 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debug-debuginfo 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo-common-aarch64 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo-common-ppc64le 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo-common-x86_64 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-tools-debuginfo 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-tools-libs-devel 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::crb perf-debuginfo 0:4.18.0-477.21.1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::crb python3-perf-debuginfo 0:4.18.0-477.21.1.el8_8

Vulnerabilities 8

  • High 8.0
    CVE-2022-42896 Public exploit

    Info Leak in l2cap_core in the Linux Kernel

    There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker coul…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-1281 Public exploit

    UAF in Linux kernel's tcindex (traffic control index filter) implementation

    Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the d…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-1829 Public exploit

    Use-after-free in tcindex (traffic control index filter) in the Linux Kernel

    A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-2235

    Use-after-free in Linux kernel's Performance Events subsystem

    A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remo…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.0
    CVE-2022-50677

    ipmi: fix use after free in _ipmi_destroy_user()

    In the Linux kernel, the following vulnerability has been resolved: ipmi: fix use after free in _ipmi_destroy_user() The intf_free() function frees the "intf" pointer so we cannot dereference it again on the next line.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 6.7
    CVE-2023-2194

    An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->bl…

    linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2022-49853

    net: macvlan: fix memory leaks of macvlan_common_newlink

    In the Linux kernel, the following vulnerability has been resolved: net: macvlan: fix memory leaks of macvlan_common_newlink kmemleak reports memory leaks in macvlan_common_newlink, as follows: ip link add link eth0 name .. type macvlan mode source macaddr ad…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-2124

    An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2147364
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2181847
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2187439
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2188396
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2188470
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2192589
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4517.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-42896
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-42896
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-42896
  • article
    https://github.com/google/security-research/security/advisories/GHSA-pf87-6c9q-jvm4
  • report
    https://access.redhat.com/security/cve/CVE-2022-49853
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2363383
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-49853
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-49853
  • article
    https://lore.kernel.org/linux-cve-announce/2025050144-CVE-2022-49853-a5ef@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-50677
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2420325
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50677
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50677
  • article
    https://lore.kernel.org/linux-cve-announce/2025120948-CVE-2022-50677-d2c8@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-1281
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-1281
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-1281
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ee059170b1f7e94e55fa6cadee544e176a6e59c2
  • report
    https://access.redhat.com/security/cve/CVE-2023-1829
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-1829
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-1829
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c710f75256bb3cf05ac7b1672c82b92c43f3d28
  • report
    https://access.redhat.com/security/cve/CVE-2023-2124
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-2124
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-2124
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/xfs/xfs_buf_item_recover.c?h=v6.4-rc1&id=22ed903eee23a5b174e240f1cdfa9acf393a5210
  • article
    https://lore.kernel.org/linux-xfs/20230412214034.GL3223426@dread.disaster.area/T/#m1ebbcd1ad061d2d33bef6f0534a2b014744d152d
  • report
    https://access.redhat.com/security/cve/CVE-2023-2194
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-2194
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-2194
  • report
    https://access.redhat.com/security/cve/CVE-2023-2235