Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Vulnerabilities 6

• High 8.0
  CVE-2022-42896 Public exploit

  Info Leak in l2cap_core in the Linux Kernel

  There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker coul…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Nov 23, 2022
• High 7.8
  CVE-2023-1281 Public exploit

  UAF in Linux kernel's tcindex (traffic control index filter) implementation

  Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the d…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Mar 22, 2023
• High 7.8
  CVE-2023-1829 Public exploit

  Use-after-free in tcindex (traffic control index filter) in the Linux Kernel

  A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 12, 2023
• High 7.8
  CVE-2023-2235

  Use-after-free in Linux kernel's Performance Events subsystem

  A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remo…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2023
• Medium 6.7
  CVE-2023-2194

  An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->bl…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu Azure Linux
  Apr 20, 2023
• Unscored —
  CVE-2023-2124

  An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  May 15, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2147364
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2181847
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187439
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2188396
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2188470
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2192589
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4541.json
• report
  https://access.redhat.com/security/cve/CVE-2022-42896
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-42896
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-42896
• article
  https://github.com/google/security-research/security/advisories/GHSA-pf87-6c9q-jvm4
• report
  https://access.redhat.com/security/cve/CVE-2023-1281
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1281
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1281
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ee059170b1f7e94e55fa6cadee544e176a6e59c2
• report
  https://access.redhat.com/security/cve/CVE-2023-1829
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1829
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1829
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c710f75256bb3cf05ac7b1672c82b92c43f3d28
• report
  https://access.redhat.com/security/cve/CVE-2023-2124
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2124
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2124
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/xfs/xfs_buf_item_recover.c?h=v6.4-rc1&id=22ed903eee23a5b174e240f1cdfa9acf393a5210
• article
  https://lore.kernel.org/linux-xfs/20230412214034.GL3223426@dread.disaster.area/T/#m1ebbcd1ad061d2d33bef6f0534a2b014744d152d
• report
  https://access.redhat.com/security/cve/CVE-2023-2194
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2194
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2194
• report
  https://access.redhat.com/security/cve/CVE-2023-2235
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2235
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2235
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fd0815f632c24878e325821943edccc7fde947a2