Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::baseos | kpatch-patch-4_18_0-513_5_1 | 0:1-2.el8_9 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | kpatch-patch-4_18_0-513_5_1-debuginfo | 0:1-2.el8_9 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | kpatch-patch-4_18_0-513_5_1-debugsource | 0:1-2.el8_9 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | kpatch-patch-4_18_0-513_9_1 | 0:1-1.el8_9 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | kpatch-patch-4_18_0-513_9_1-debuginfo | 0:1-1.el8_9 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | kpatch-patch-4_18_0-513_9_1-debugsource | 0:1-1.el8_9 |
Vulnerabilities 2
-
High 7.8CVE-2023-4622 Public exploit
Use-after-free in Linux kernel's af_unix component
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there…
-
High 7.0
Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer o…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2237760
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2239843
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0089.json
-
report
https://access.redhat.com/security/cve/CVE-2023-4622
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-4622
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-4622
-
article
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-6.1.y&id=790c2f9d15b594350ae9bca7b236f2b1859de02c
-
report
https://access.redhat.com/security/cve/CVE-2023-42753
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-42753
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-42753
-
article
https://seclists.org/oss-sec/2023/q3/216