Red Hat Security Advisory: kernel security update

Fixed packages 136

Vulnerabilities 7

• Critical 9.3
  CVE-2023-53996

  x86/sev: Make enc_dec_hypercall() accept a size instead of npages

  In the Linux kernel, the following vulnerability has been resolved: x86/sev: Make enc_dec_hypercall() accept a size instead of npages enc_dec_hypercall() accepted a page count instead of a size, which forced its callers to round up. As a result, non-page alig…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 24, 2025
• High 7.8
  CVE-2023-5345

  Use-after-free in Linux kernel's fs/smb/client component

  A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Oct 3, 2023
• Medium 6.5
  CVE-2023-1192

  Use-after-free in smb2_is_status_io_timeout()

  A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses …

  Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Nov 1, 2023
• Unscored —
  CVE-2023-20569

  A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. …

  AMD 3rd Gen AMD EPYC™ Processors 2nd Gen AMD EPYC™ Processors 4th Gen AMD EPYC™ Processors Debian Ubuntu Alpine
  Aug 8, 2023
• Unscored —
  CVE-2023-45871

  An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Oct 15, 2023
• Unscored —
  CVE-2023-53657

  ice: Don't tx before switchdev is fully configured

  In the Linux kernel, the following vulnerability has been resolved: ice: Don't tx before switchdev is fully configured There is possibility that ice_eswitch_port_start_xmit might be called while some resources are still not allocated which might cause NULL po…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Oct 7, 2025
• Unscored —
  CVE-2023-54170

  keys: Fix linking a duplicate key to a keyring's assoc_array

  In the Linux kernel, the following vulnerability has been resolved: keys: Fix linking a duplicate key to a keyring's assoc_array When making a DNS query inside the kernel using dns_query(), the request code can in rare cases end up creating a duplicate index …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 30, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2154178
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2207625
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2242172
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2244723
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7749.json
• report
  https://access.redhat.com/security/cve/CVE-2023-1192
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1192
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1192
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d527f51331cace562393a8038d870b3e9916686fCVE-2023-52
• report
  https://access.redhat.com/security/cve/CVE-2023-5345
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-5345
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-5345
• report
  https://access.redhat.com/security/cve/CVE-2023-20569
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-20569
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-20569
• article
  https://access.redhat.com/solutions/7049120
• article
  https://www.amd.com/content/dam/amd/en/documents/corporate/cr/speculative-return-stack-overflow-whitepaper.pdf
• article
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7005.html
• report
  https://access.redhat.com/security/cve/CVE-2023-45871
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-45871
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-45871
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=bb5ed01cd2428cd25b1c88a3a9cba87055eb289f
• report
  https://access.redhat.com/security/cve/CVE-2023-53657
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2402281
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-53657
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-53657
• article
  https://lore.kernel.org/linux-cve-announce/2025100701-CVE-2023-53657-d0c7@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-53996
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2424944
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-53996
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-53996
• article
  https://lore.kernel.org/linux-cve-announce/2025122425-CVE-2023-53996-2c23@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-54170
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2426038
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-54170
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-54170
• article
  https://lore.kernel.org/linux-cve-announce/2025123020-CVE-2023-54170-f1c6@gregkh/T