Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 52

Vulnerabilities 14

• High 7.8
  CVE-2023-2235

  Use-after-free in Linux kernel's Performance Events subsystem

  A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remo…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2023
• High 7.8
  CVE-2023-3090

  Out-of-bounds write in Linux kernel's ipvlan network driver

  A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is r…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 28, 2023
• High 7.8
  CVE-2023-35001 Public exploit

  Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability

  Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 5, 2023
• High 7.8
  CVE-2023-4004

  Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()

  A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their pr…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 31, 2023
• High 7.8
  CVE-2023-53556

  iavf: Fix use-after-free in free_netdev

  In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in free_netdev We do netif_napi_add() for all allocated q_vectors[], but potentially do netif_napi_del() for part of them, then kfree q_vectors and leave invalid poin…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Oct 4, 2025
• Medium 6.9
  CVE-2022-2503

  Linux Kernel LoadPin bypass via dm-verity table reload

  Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the …

  Linux kernel Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 12, 2022
• Medium 5.5
  CVE-2022-36879

  An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jul 27, 2022
• Medium 5.5
  CVE-2023-1095

  In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction …

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu Azure Linux
  Feb 28, 2023
• Medium 5.5
  CVE-2023-53245

  scsi: storvsc: Fix handling of virtual Fibre Channel timeouts

  In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them in a guest VM as a SCSI device. I/…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 15, 2025
• Unscored —
  CVE-2020-36558

  A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and gen…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 21, 2022
• Unscored —
  CVE-2022-2873

  An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Aug 22, 2022
• Unscored —
  CVE-2023-0590

  A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This f…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 23, 2023
• Unscored —
  CVE-2023-1206 Public exploit

  A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a use…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jun 30, 2023
• Unscored —
  CVE-2023-4128 Public exploit Rejected

  ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record i…

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Aug 10, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2112693
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2119048
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2119855
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2165741
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2173973
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2175903
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2177862
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2192589
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2218672
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2220892
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2225275
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2225511
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5627.json
• report
  https://access.redhat.com/security/cve/CVE-2020-36558
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-36558
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-36558
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6cd1ed50efd88261298577cd92a14f2768eddeeb
• report
  https://access.redhat.com/security/cve/CVE-2022-2503
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2503
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2503
• article
  https://github.com/google/security-research/security/advisories/GHSA-6vq3-w69p-w63m
• report
  https://access.redhat.com/security/cve/CVE-2022-2873
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2873
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2873
• article
  https://lore.kernel.org/lkml/20220729093451.551672-1-zheyuma97@gmail.com/T/
• report
  https://access.redhat.com/security/cve/CVE-2022-36879
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-36879
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-36879
• report
  https://access.redhat.com/security/cve/CVE-2023-0590
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0590
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0590
• article
  https://lore.kernel.org/all/20221018203258.2793282-1-edumazet@google.com/
• report
  https://access.redhat.com/security/cve/CVE-2023-1095
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1095
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1095
• report
  https://access.redhat.com/security/cve/CVE-2023-1206
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1206
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1206