Red Hat Security Advisory: kernel security update

Fixed packages 52

Vulnerabilities 18

• High 7.8
  CVE-2024-1086 Exploited · Ransomware Public exploit EPSS 28%

  Use-after-free in Linux kernel's netfilter: nf_tables component

  A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slo…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jan 31, 2024

  KEV May 30, 2024
• High 7.8
  CVE-2022-29581 Public exploit

  Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege …

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 17, 2022
• High 7.8
  CVE-2023-51042

  In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jan 23, 2024
• High 7.8
  CVE-2023-6931 Public exploit

  Out-of-bounds write in Linux kernel's Performance Events system component

  A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation. A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 19, 2023
• High 7.0
  CVE-2023-6546 Public exploit

  Kernel: gsm multiplexing race condition leads to privilege escalation

  A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Dec 21, 2023
• Medium 6.5
  CVE-2023-30456

  An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Apr 10, 2023
• Medium 6.3
  CVE-2022-36402

  There is an int overflow vulnerability in vmwgfx driver

  An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain …

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 16, 2022
• Medium 6.3
  CVE-2022-38096

  There is a NULL pointer vulnerability in vmwgfx driver

  A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system t…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 9, 2022
• Medium 6.3
  CVE-2022-38457

  There is an UAF vulnerability in vmwgfx driver

  A use-after-free(UAF) vulnerability was found in function 'vmw_cmd_res_check' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 9, 2022
• Medium 6.3
  CVE-2022-40133

  There is an UAF vulnerability in vmwgfx driver

  A use-after-free(UAF) vulnerability was found in function 'vmw_execbuf_tie_context' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account …

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 9, 2022
• Medium 5.8
  CVE-2022-2196

  Speculative execution attacks in KVM VMX

  A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jan 9, 2023
• Medium 5.5
  CVE-2023-1074

  A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a us…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 27, 2023
• Medium 5.5
  CVE-2023-31084

  An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Apr 24, 2023
• Medium 4.6
  CVE-2022-3625

  Linux Kernel IPsec devlink.c devlink_param_get use after free

  A vulnerability was found in Linux Kernel. It has been classified as critical. This affects the function devlink_param_set/devlink_param_get of the file net/core/devlink.c of the component IPsec. The manipulation leads to use after free. It is recommended to …

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Oct 21, 2022
• Unscored —
  CVE-2021-33655

  When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jul 18, 2022
• Unscored —
  CVE-2022-20368

  Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel

  linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
  Aug 11, 2022
• Unscored —
  CVE-2022-23960

  Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-B…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Mar 12, 2022
• Unscored —
  CVE-2022-3239

  A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 19, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2062284
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2088021
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2108691
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2123695
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2127985
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2133451
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2133452
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2133453
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2133455
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2144720
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2160023
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2173430
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2188468
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2213139
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2252731
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2255498
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2259866
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2262126
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0930.json
• report
  https://access.redhat.com/security/cve/CVE-2021-33655
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-33655
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-33655
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=086ff84617185393a0bbf25830c4f36412a7d3f4
• report
  https://access.redhat.com/security/cve/CVE-2022-2196
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2196
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2196
• report
  https://access.redhat.com/security/cve/CVE-2022-3239
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-3239
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-3239
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c08eadca1bdfa099e20a32f8fa4b52b2f672236d
• report
  https://access.redhat.com/security/cve/CVE-2022-3625
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-3625
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-3625
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=6b4db2e528f650c7fb712961aac36455468d5902
• report
  https://access.redhat.com/security/cve/CVE-2022-20368
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-20368
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-20368
• report
  https://access.redhat.com/security/cve/CVE-2022-23960