Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 52

Vulnerabilities 13

• High 8.0
  CVE-2022-42896 Public exploit

  Info Leak in l2cap_core in the Linux Kernel

  There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker coul…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Nov 23, 2022
• High 7.8
  CVE-2023-1829 Public exploit

  Use-after-free in tcindex (traffic control index filter) in the Linux Kernel

  A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 12, 2023
• High 7.8
  CVE-2023-3390 Public exploit

  Use-after-free in Linux kernel's netfilter subsystem

  A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vu…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 28, 2023
• High 7.8
  CVE-2023-35788 Public exploit

  An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an o…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jun 16, 2023
• High 7.0
  CVE-2023-28466

  do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race con…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 15, 2023
• Medium 5.5
  CVE-2023-1637

  A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 27, 2023
• Unscored —
  CVE-2021-33656

  When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 18, 2022
• Unscored —
  CVE-2022-50318

  perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()

  In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() pci_get_device() will increase the reference count for the returned 'dev'. We need to call pci_dev_put() to decrease …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 15, 2025
• Unscored —
  CVE-2022-50615

  perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map()

  In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() pci_get_device() will increase the reference count for the returned pci_dev, so snr_uncore_get_mc_dev() will return a …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 8, 2025
• Unscored —
  CVE-2023-2002 Public exploit

  A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  May 26, 2023
• Unscored —
  CVE-2023-20593 Public exploit

  An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access …

  AMD 2nd Gen AMD EPYC™ Processors Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT Debian Ubuntu Alpine
  Jul 24, 2023
• Unscored —
  CVE-2023-2124

  An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  May 15, 2023
• Unscored —
  CVE-2023-44466 EPSS 45%

  An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness err…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Sep 29, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2108696
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2147364
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2179000
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2181891
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187308
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187439
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2188470
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2213260
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2215768
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2217845
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4789.json
• report
  https://access.redhat.com/security/cve/CVE-2021-33656
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-33656
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-33656
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/releases/5.10.127/vt-drop-old-font-ioctls.patch
• report
  https://access.redhat.com/security/cve/CVE-2022-42896
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-42896
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-42896
• article
  https://github.com/google/security-research/security/advisories/GHSA-pf87-6c9q-jvm4
• report
  https://access.redhat.com/security/cve/CVE-2022-50318
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2395235
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50318
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50318
• article
  https://lore.kernel.org/linux-cve-announce/2025091552-CVE-2022-50318-6f5e@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-50615
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2419866
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50615
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50615
• article
  https://lore.kernel.org/linux-cve-announce/2025120851-CVE-2022-50615-5c90@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-1637
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1637
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1637
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e2a1256b17b16f9b9adf1b6fea56819e7b68e463
• article
  https://sourceware.org/bugzilla/show_bug.cgi?id=27398
• report
  https://access.redhat.com/security/cve/CVE-2023-1829
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1829
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1829
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c710f75256bb3cf05ac7b1672c82b92c43f3d28