Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 73

Vulnerabilities 2

• High 8.0
  CVE-2022-42896 Public exploit

  Info Leak in l2cap_core in the Linux Kernel

  There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker coul…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Nov 23, 2022
• Unscored —
  CVE-2023-4128 Public exploit Rejected

  ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record i…

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Aug 10, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2147364
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2225511
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5589.json
• report
  https://access.redhat.com/security/cve/CVE-2022-42896
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-42896
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-42896
• article
  https://github.com/google/security-research/security/advisories/GHSA-pf87-6c9q-jvm4
• report
  https://access.redhat.com/security/cve/CVE-2023-4128
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2261965
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-4128
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-4128
• article
  https://access.redhat.com/security/cve/CVE-2023-4206
• article
  https://access.redhat.com/security/cve/CVE-2023-4207
• article
  https://access.redhat.com/security/cve/CVE-2023-4208