Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 43

Vulnerabilities 8

• Critical 10.0
  CVE-2023-2163 Public exploit

  Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation

  Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 20, 2023
• High 8.8
  CVE-2023-5178 Public exploit

  Kernel: use after free in nvmet_tcp_free_crypto in nvme

  A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, whic…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Nov 1, 2023
• High 7.8
  CVE-2023-3812

  Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags

  An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 24, 2023
• Medium 6.5
  CVE-2023-1192

  Use-after-free in smb2_is_status_io_timeout()

  A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses …

  Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Nov 1, 2023
• Unscored —
  CVE-2022-45884

  An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, relate…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Nov 25, 2022
• Unscored —
  CVE-2022-45886

  An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dv…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Nov 25, 2022
• Unscored —
  CVE-2022-45919

  An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-fre…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Nov 27, 2022
• Unscored —
  CVE-2023-52562

  mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy()

  In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() After the commit in Fixes:, if a module that created a slab cache does not release all of its allocated objects befo…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 2, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2148510
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2148517
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151956
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2154178
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2224048
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2240249
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2241924
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7549.json
• report
  https://access.redhat.com/security/cve/CVE-2022-45884
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-45884
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-45884
• article
  https://lore.kernel.org/linux-media/20221117045925.14297-4-imv4bel@gmail.com/
• report
  https://access.redhat.com/security/cve/CVE-2022-45886
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-45886
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-45886
• article
  https://lore.kernel.org/linux-media/20221115131822.6640-1-imv4bel@gmail.com/
• article
  https://lore.kernel.org/linux-media/20221115131822.6640-3-imv4bel@gmail.com/
• report
  https://access.redhat.com/security/cve/CVE-2022-45919
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-45919
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-45919
• article
  https://lore.kernel.org/linux-media/20221121063308.GA33821@ubuntu/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2023-1192
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1192
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1192
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d527f51331cace562393a8038d870b3e9916686fCVE-2023-52
• report
  https://access.redhat.com/security/cve/CVE-2023-2163
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2163
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2163
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed
• report
  https://access.redhat.com/security/cve/CVE-2023-3812
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-3812
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-3812
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=363a5328f4b0
• report
  https://access.redhat.com/security/cve/CVE-2023-5178
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-5178
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-5178
• article
  https://lore.kernel.org/linux-nvme/20231002105428.226515-1-sagi@grimberg.me/
• report
  https://access.redhat.com/security/cve/CVE-2023-52562