Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::baseos | kpatch-patch-4_18_0-513_11_1 | 0:1-1.el8_9 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | kpatch-patch-4_18_0-513_11_1-debuginfo | 0:1-1.el8_9 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | kpatch-patch-4_18_0-513_11_1-debugsource | 0:1-1.el8_9 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | kpatch-patch-4_18_0-513_5_1 | 0:1-3.el8_9 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | kpatch-patch-4_18_0-513_5_1-debuginfo | 0:1-3.el8_9 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | kpatch-patch-4_18_0-513_5_1-debugsource | 0:1-3.el8_9 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | kpatch-patch-4_18_0-513_9_1 | 0:1-2.el8_9 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | kpatch-patch-4_18_0-513_9_1-debuginfo | 0:1-2.el8_9 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | kpatch-patch-4_18_0-513_9_1-debugsource | 0:1-2.el8_9 |
Vulnerabilities 4
-
High 7.8
Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation. If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without…
-
High 7.8
Use-after-free in Linux kernel's net/sched: sch_qfq component
A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue()…
-
High 7.0
Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privile…
-
Unscored —
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2237757
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2244723
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2245514
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2253908
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0876.json
-
report
https://access.redhat.com/security/cve/CVE-2023-4623
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-4623
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-4623
-
article
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b3d26c5702c7d6c45456326e56d2ccf3f103e60f
-
report
https://access.redhat.com/security/cve/CVE-2023-4921
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-4921
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-4921
-
article
https://github.com/torvalds/linux/commit/8fc134fee27f2263988ae38920bc03da416b03d8
-
report
https://access.redhat.com/security/cve/CVE-2023-45871
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-45871
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-45871
-
article
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=bb5ed01cd2428cd25b1c88a3a9cba87055eb289f
-
report
https://access.redhat.com/security/cve/CVE-2024-0646
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-0646
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-0646
-
article
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5a595000e267