Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 52

Vulnerabilities 8

• High 7.8
  CVE-2022-50243

  sctp: handle the error returned from sctp_auth_asoc_init_active_key

  In the Linux kernel, the following vulnerability has been resolved: sctp: handle the error returned from sctp_auth_asoc_init_active_key When it returns an error from sctp_auth_asoc_init_active_key(), the active_key is actually not updated. The old sh_key will…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 15, 2025
• High 7.8
  CVE-2022-50274

  media: dvbdev: adopts refcnt to avoid UAF

  In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: adopts refcnt to avoid UAF dvb_unregister_device() is known that prone to use-after-free. That is, the cleanup from dvb_unregister_device() releases the dvb_device even if ther…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 15, 2025
• High 7.8
  CVE-2023-3609 Public exploit

  Use-after-free in Linux kernel's net/sched: cls_u32 component

  A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the refe…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 21, 2023
• High 7.8
  CVE-2023-3776 Public exploit

  Use-after-free in Linux kernel's net/sched: cls_fw component

  A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the refere…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 21, 2023
• Medium 5.5
  CVE-2023-2177

  A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If …

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu Azure Linux
  Apr 20, 2023
• Unscored —
  CVE-2022-45884

  An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, relate…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Nov 25, 2022
• Unscored —
  CVE-2022-45886

  An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dv…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Nov 25, 2022
• Unscored —
  CVE-2022-45919

  An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-fre…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Nov 27, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2148510
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2148517
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151956
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187953
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2225097
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2225201
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7398.json
• report
  https://access.redhat.com/security/cve/CVE-2022-45884
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-45884
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-45884
• article
  https://lore.kernel.org/linux-media/20221117045925.14297-4-imv4bel@gmail.com/
• report
  https://access.redhat.com/security/cve/CVE-2022-45886
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-45886
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-45886
• article
  https://lore.kernel.org/linux-media/20221115131822.6640-1-imv4bel@gmail.com/
• article
  https://lore.kernel.org/linux-media/20221115131822.6640-3-imv4bel@gmail.com/
• report
  https://access.redhat.com/security/cve/CVE-2022-45919
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-45919
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-45919
• article
  https://lore.kernel.org/linux-media/20221121063308.GA33821@ubuntu/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2022-50243
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2395428
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50243
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50243
• article
  https://lore.kernel.org/linux-cve-announce/2025091548-CVE-2022-50243-4311@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-50274
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2395314
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50274
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50274
• article
  https://lore.kernel.org/linux-cve-announce/2025091505-CVE-2022-50274-ad8d@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-2177
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2177
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2177
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=181d8d2066c0
• report
  https://access.redhat.com/security/cve/CVE-2023-3609
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-3609
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-3609
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=04c55383fa5689357bcdd2c8036725a55ed632bc