Skip to content
OpenAdvisories
High RHSA-2023:4531 3 CVEs

Red Hat Security Advisory: kpatch-patch security update

Published Sep 13, 2024 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos kpatch-patch-4_18_0-477_10_1 0:1-2.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kpatch-patch-4_18_0-477_10_1-debuginfo 0:1-2.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kpatch-patch-4_18_0-477_10_1-debugsource 0:1-2.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kpatch-patch-4_18_0-477_13_1 0:1-1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kpatch-patch-4_18_0-477_13_1-debuginfo 0:1-1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kpatch-patch-4_18_0-477_13_1-debugsource 0:1-1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kpatch-patch-4_18_0-477_15_1 0:1-1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kpatch-patch-4_18_0-477_15_1-debuginfo 0:1-1.el8_8
Red Hat · RHEL 8 enterprise_linux:8::baseos kpatch-patch-4_18_0-477_15_1-debugsource 0:1-1.el8_8

Vulnerabilities 3

  • High 8.0
    CVE-2022-42896 Public exploit

    Info Leak in l2cap_core in the Linux Kernel

    There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker coul…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-1281 Public exploit

    UAF in Linux kernel's tcindex (traffic control index filter) implementation

    Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the d…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-1829 Public exploit

    Use-after-free in tcindex (traffic control index filter) in the Linux Kernel

    A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2147364
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2181847
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2188470
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4531.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-42896
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-42896
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-42896
  • article
    https://github.com/google/security-research/security/advisories/GHSA-pf87-6c9q-jvm4
  • report
    https://access.redhat.com/security/cve/CVE-2023-1281
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-1281
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-1281
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ee059170b1f7e94e55fa6cadee544e176a6e59c2
  • report
    https://access.redhat.com/security/cve/CVE-2023-1829
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-1829
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-1829
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c710f75256bb3cf05ac7b1672c82b92c43f3d28