Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Vulnerabilities 12

• High 8.8
  CVE-2023-5178 Public exploit

  Kernel: use after free in nvmet_tcp_free_crypto in nvme

  A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, whic…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Nov 1, 2023
• High 7.8
  CVE-2023-3777

  Use-after-free in Linux kernel's netfilter: nf_tables component

  A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. When nf_tables_delrule() is flushing table rules, it is not checked whether the chain is bound and the chain's owner ru…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 6, 2023
• High 7.8
  CVE-2023-4623

  Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component

  A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation. If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 6, 2023
• High 7.8
  CVE-2023-52974

  scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress

  In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipadd…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 27, 2025
• High 7.8
  CVE-2023-52975

  scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress

  In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress Bug report and analysis from Ding Hui. During iSCSI session logout, if another task accesses the shost ipaddress attr…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 27, 2025
• High 7.1
  CVE-2022-41858

  A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu Azure Linux
  Jan 17, 2023
• High 7.1
  CVE-2023-3567

  Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race

  A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 24, 2023
• High 7.0
  CVE-2023-46813 Public exploit

  An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO regi…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Oct 27, 2023
• Medium 5.5
  CVE-2022-36879

  An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jul 27, 2022
• Medium 5.5
  CVE-2023-1195

  A use-after-free flaw was found in reconn_set_ipaddr_from_hostname in fs/cifs/connect.c in the Linux kernel. The issue …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  May 18, 2023
• Medium 5.5
  CVE-2023-2162

  A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-compone…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Apr 19, 2023
• Unscored —
  CVE-2023-45871

  An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Oct 15, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2119855
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2144379
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2154171
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187773
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2221463
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2237750
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2237757
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2241924
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2244723
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2246944
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0431.json
• report
  https://access.redhat.com/security/cve/CVE-2022-36879
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-36879
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-36879
• report
  https://access.redhat.com/security/cve/CVE-2022-41858
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-41858
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-41858
• article
  https://github.com/torvalds/linux/commit/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798
• report
  https://access.redhat.com/security/cve/CVE-2023-1195
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1195
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1195
• article
  https://github.com/torvalds/linux/commit/153695d36ead0ccc4d0256953c751cabf673e621
• report
  https://access.redhat.com/security/cve/CVE-2023-2162
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2162
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2162
• article
  https://www.spinics.net/lists/linux-scsi/msg181542.html
• report
  https://access.redhat.com/security/cve/CVE-2023-3567
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-3567
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-3567
• article
  https://www.spinics.net/lists/stable-commits/msg285184.html
• report
  https://access.redhat.com/security/cve/CVE-2023-3777
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-3777
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-3777
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8
• report
  https://access.redhat.com/security/cve/CVE-2023-4623
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-4623
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-4623
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b3d26c5702c7d6c45456326e56d2ccf3f103e60f