Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 43

Vulnerabilities 21

• High 7.8
  CVE-2022-50822

  RDMA/restrack: Release MR restrack when delete

  In the Linux kernel, the following vulnerability has been resolved: RDMA/restrack: Release MR restrack when delete The MR restrack also needs to be released when delete it, otherwise it cause memory leak as the task struct won't be released.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 30, 2025
• High 7.8
  CVE-2023-3609 Public exploit

  Use-after-free in Linux kernel's net/sched: cls_u32 component

  A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the refe…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 21, 2023
• High 7.8
  CVE-2023-4206

  Use-after-free in Linux kernel's net/sched: cls_route component

  A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation. When route4_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instanc…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 6, 2023
• High 7.8
  CVE-2023-4207

  Use-after-free in Linux kernel's net/sched: cls_fw component

  A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. When fw_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of th…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 6, 2023
• High 7.8
  CVE-2023-4208

  Use-after-free in Linux kernel's net/sched: cls_u32 component

  A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of …

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 6, 2023
• High 7.0
  CVE-2023-42753

  Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

  An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer o…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Sep 25, 2023
• Medium 6.5
  CVE-2022-40982

  Information exposure through microarchitectural state after transient execution in certain vector execution units for s…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Aug 11, 2023
• Medium 6.5
  CVE-2023-1192

  Use-after-free in smb2_is_status_io_timeout()

  A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses …

  Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Nov 1, 2023
• Medium 5.5
  CVE-2023-53299

  md/raid10: fix leak of 'r10bio->remaining' for recovery

  In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio->remaining' for recovery raid10_sync_request() will add 'r10bio->remaining' for both rdev and replacement rdev. However, if the read io fails, recovery_request_…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 16, 2025
• Medium 4.7
  CVE-2023-4732

  Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h

  A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmd_t x.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Oct 3, 2023
• Unscored —
  CVE-2022-45884

  An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, relate…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Nov 25, 2022
• Unscored —
  CVE-2022-45886

  An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dv…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Nov 25, 2022
• Unscored —
  CVE-2022-45919

  An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-fre…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Nov 27, 2022
• Unscored —
  CVE-2023-38409

  An issue was discovered in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12. Becaus…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jul 17, 2023
• Unscored —
  CVE-2023-4128 Public exploit Rejected

  ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record i…

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Aug 10, 2023
• Unscored —
  CVE-2023-52562

  mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy()

  In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() After the commit in Fixes:, if a module that created a slab cache does not release all of its allocated objects befo…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 2, 2024
• Unscored —
  CVE-2023-53114

  i40e: Fix kernel crash during reboot when adapter is in recovery mode

  In the Linux kernel, the following vulnerability has been resolved: i40e: Fix kernel crash during reboot when adapter is in recovery mode If the driver detects during probe that firmware is in recovery mode then i40e_init_recovery_mode() is called and the res…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 2, 2025
• Unscored —
  CVE-2023-53620

  md: fix soft lockup in status_resync

  In the Linux kernel, the following vulnerability has been resolved: md: fix soft lockup in status_resync status_resync() will calculate 'curr_resync - recovery_active' to show user a progress bar like following: [============>........] resync = 61.4% 'curr_re…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Oct 7, 2025
• Unscored —
  CVE-2023-53832

  md/raid10: fix null-ptr-deref in raid10_sync_request

  In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null-ptr-deref in raid10_sync_request init_resync() inits mempool and sets conf->have_replacemnt at the beginning of sync, close_sync() frees the mempool when sync is completed…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 9, 2025
• Unscored —
  CVE-2023-54123

  md/raid10: fix memleak for 'conf->bio_split'

  In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak for 'conf->bio_split' In the error path of raid10_run(), 'conf' need be freed, however, 'conf->bio_split' is missed and memory will be leaked. Since there are 3 places …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 24, 2025
• Unscored —
  CVE-2023-54294

  md/raid10: fix memleak of md thread

  In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak of md thread In raid10_run(), if setup_conf() succeed and raid10_run() failed before setting 'mddev->thread', then in the error path 'conf->thread' is not freed. Fix th…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 30, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/solutions/7027704
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2148510
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2148517
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151956
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2154178
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2223949
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2225201
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2225511
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2230042
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2236982
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2239843
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7539.json
• report
  https://access.redhat.com/security/cve/CVE-2022-40982
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-40982
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-40982
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html
• report
  https://access.redhat.com/security/cve/CVE-2022-45884
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-45884
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-45884
• article
  https://lore.kernel.org/linux-media/20221117045925.14297-4-imv4bel@gmail.com/
• report
  https://access.redhat.com/security/cve/CVE-2022-45886
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-45886
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-45886
• article
  https://lore.kernel.org/linux-media/20221115131822.6640-1-imv4bel@gmail.com/
• article
  https://lore.kernel.org/linux-media/20221115131822.6640-3-imv4bel@gmail.com/
• report
  https://access.redhat.com/security/cve/CVE-2022-45919
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-45919
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-45919
• article
  https://lore.kernel.org/linux-media/20221121063308.GA33821@ubuntu/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2022-50822
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2426224
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50822
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50822
• article
  https://lore.kernel.org/linux-cve-announce/2025123016-CVE-2022-50822-2187@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-1192
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1192
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1192
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d527f51331cace562393a8038d870b3e9916686fCVE-2023-52