Red Hat Security Advisory: kernel security update

Fixed packages 85

Vulnerabilities 10

• High 7.8
  CVE-2023-6932

  Use-after-free in Linux kernel's ipv4: igmp component

  A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 19, 2023
• High 7.1
  CVE-2023-6606

  Kernel: out-of-bounds read vulnerability in smbcalcsize

  An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Dec 8, 2023
• High 7.1
  CVE-2023-6610

  Kernel: oob access in smb2_dump_detail

  An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Dec 8, 2023
• High 7.0
  CVE-2024-0646

  Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

  An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privile…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jan 17, 2024
• Medium 6.5
  CVE-2023-6356

  Kernel: null pointer dereference in nvmet_tcp_build_iovec

  A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing ke…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Feb 7, 2024
• Medium 6.5
  CVE-2023-6535

  Kernel: null pointer dereference in nvmet_tcp_execute_request

  A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kerne…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Feb 7, 2024
• Medium 6.5
  CVE-2023-6536

  Kernel: null pointer dereference in __nvmet_req_complete

  A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kerne…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Feb 7, 2024
• Medium 5.5
  CVE-2023-1074

  A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a us…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 27, 2023
• Medium 5.5
  CVE-2023-7192

  Kernel: refcount leak in ctnetlink_create_conntrack()

  A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jan 2, 2024
• Unscored —
  CVE-2023-45862

  An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Oct 14, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2173430
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2244715
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2253611
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2253614
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2253908
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2254052
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2254053
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2254054
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2255283
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2256279
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0723.json
• report
  https://access.redhat.com/security/cve/CVE-2023-1074
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1074
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1074
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=458e279f861d3f61796894cd158b780765a1569f
• article
  https://www.openwall.com/lists/oss-security/2023/01/23/1
• report
  https://access.redhat.com/security/cve/CVE-2023-6356
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6356
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6356
• report
  https://access.redhat.com/security/cve/CVE-2023-6535
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6535
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6535
• report
  https://access.redhat.com/security/cve/CVE-2023-6536
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6536
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6536
• report
  https://access.redhat.com/security/cve/CVE-2023-6606
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6606
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6606
• article
  https://bugzilla.kernel.org/show_bug.cgi?id=218218
• report
  https://access.redhat.com/security/cve/CVE-2023-6610
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6610
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6610
• article
  https://bugzilla.kernel.org/show_bug.cgi?id=218219
• report
  https://access.redhat.com/security/cve/CVE-2023-6932
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6932
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6932
• report
  https://access.redhat.com/security/cve/CVE-2023-7192
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-7192