Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Vulnerabilities 5

• High 7.8
  CVE-2023-3090

  Out-of-bounds write in Linux kernel's ipvlan network driver

  A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is r…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 28, 2023
• High 7.0
  CVE-2023-28466

  do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race con…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 15, 2023
• Medium 5.3
  CVE-2023-0458

  Spectre V1 Gadget in do_prlimit in the Linux Kernel

  A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 26, 2023
• Unscored —
  CVE-2022-1353

  A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a lo…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 29, 2022
• Unscored —
  CVE-2022-39188

  An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unma…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Sep 2, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2066819
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2130141
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2179000
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2193219
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2218672
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4814.json
• report
  https://access.redhat.com/security/cve/CVE-2022-1353
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1353
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1353
• article
  https://github.com/torvalds/linux/commit/9a564bccb78a76740ea9d75a259942df8143d02c
• report
  https://access.redhat.com/security/cve/CVE-2022-39188
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-39188
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-39188
• article
  https://bugs.chromium.org/p/project-zero/issues/detail?id=2329
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b67fbebd4cf980aecbcc750e1462128bffe8ae15
• article
  https://lore.kernel.org/stable/20220831191348.3388208-1-jannh@google.com/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2023-0458
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0458
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0458
• article
  https://github.com/torvalds/linux/commit/739790605705ddcf18f21782b9c99ad7d53a8c11
• report
  https://access.redhat.com/security/cve/CVE-2023-3090
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-3090
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-3090
• report
  https://access.redhat.com/security/cve/CVE-2023-28466
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-28466
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-28466
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=49c47cc21b5b7a3d8deb18fc57b0aa2ab1286962