Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::server | kpatch-patch-3_10_0-1160_88_1 | 0:1-3.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | kpatch-patch-3_10_0-1160_88_1-debuginfo | 0:1-3.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | kpatch-patch-3_10_0-1160_90_1 | 0:1-3.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | kpatch-patch-3_10_0-1160_90_1-debuginfo | 0:1-3.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | kpatch-patch-3_10_0-1160_92_1 | 0:1-3.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | kpatch-patch-3_10_0-1160_92_1-debuginfo | 0:1-3.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | kpatch-patch-3_10_0-1160_95_1 | 0:1-2.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | kpatch-patch-3_10_0-1160_95_1-debuginfo | 0:1-2.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | kpatch-patch-3_10_0-1160_99_1 | 0:1-1.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | kpatch-patch-3_10_0-1160_99_1-debuginfo | 0:1-1.el7 |
Vulnerabilities 3
-
High 7.8
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused…
-
High 7.8CVE-2023-35001 Public exploit
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
-
High 7.8CVE-2023-3609 Public exploit
Use-after-free in Linux kernel's net/sched: cls_u32 component
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the refe…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2196105
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2220892
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2225201
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5574.json
-
report
https://access.redhat.com/security/cve/CVE-2023-3609
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-3609
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-3609
-
article
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=04c55383fa5689357bcdd2c8036725a55ed632bc
-
report
https://access.redhat.com/security/cve/CVE-2023-32233
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-32233
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-32233
-
article
https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab
-
article
https://www.openwall.com/lists/oss-security/2023/05/08/4
-
report
https://access.redhat.com/security/cve/CVE-2023-35001
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-35001
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-35001
-
article
https://lore.kernel.org/netfilter-devel/20230705121515.747251-1-cascardo@canonical.com/T/
-
article
https://www.openwall.com/lists/oss-security/2023/07/05/3