Red Hat Security Advisory: kernel security update

Fixed packages 85

Vulnerabilities 11

• High 7.8
  CVE-2024-1086 Exploited · Ransomware Public exploit EPSS 28%

  Use-after-free in Linux kernel's netfilter: nf_tables component

  A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slo…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jan 31, 2024

  KEV May 30, 2024
• High 7.8
  CVE-2023-4244

  Use-after-free in Linux kernel's netfilter: nf_tables component

  A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Due to a race condition between nf_tables netlink control plane transaction and nft_set element garbage collection, it …

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 6, 2023
• High 7.8
  CVE-2023-51042

  In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jan 23, 2024
• High 7.8
  CVE-2023-6817

  Use-after-free in Linux kernel's netfilter: nf_tables component

  A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PI…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 18, 2023
• High 7.8
  CVE-2023-6931 Public exploit

  Out-of-bounds write in Linux kernel's Performance Events system component

  A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation. A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 19, 2023
• High 7.8
  CVE-2024-0193

  Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation

  A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Jan 2, 2024
• High 7.8
  CVE-2024-1085

  Use-after-free in Linux kernel's netfilter: nf_tables component

  A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_setelem_catchall_deactivate() function checks whether the catch-all set element is active in the current genera…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jan 31, 2024
• High 7.0
  CVE-2023-51043

  In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a n…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jan 23, 2024
• High 7.0
  CVE-2023-6546 Public exploit

  Kernel: gsm multiplexing race condition leads to privilege escalation

  A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Dec 21, 2023
• Medium 6.3
  CVE-2022-38096

  There is a NULL pointer vulnerability in vmwgfx driver

  A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system t…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 9, 2022
• Unscored —
  CVE-2023-52924

  netfilter: nf_tables: don't skip expired elements during walk

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't skip expired elements during walk There is an asymmetry between commit/abort and preparation phase if the following conditions are met: 1. set is a verdict map ("1…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 5, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2133452
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2235306
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2252731
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2255139
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2255498
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2255653
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2259866
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2260005
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2262126
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2262127
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1018.json
• report
  https://access.redhat.com/security/cve/CVE-2022-38096
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-38096
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-38096
• report
  https://access.redhat.com/security/cve/CVE-2023-4244
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-4244
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-4244
• article
  https://lore.kernel.org/netdev/20230810070830.24064-1-pablo@netfilter.org/
• article
  https://lore.kernel.org/netdev/20230815223011.7019-1-fw@strlen.de/
• report
  https://access.redhat.com/security/cve/CVE-2023-6546
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6546
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6546
• article
  https://github.com/torvalds/linux/commit/3c4f8333b582487a2d1e02171f1465531cde53e3
• article
  https://www.zerodayinitiative.com/advisories/ZDI-CAN-20527
• report
  https://access.redhat.com/security/cve/CVE-2023-6817
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6817
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6817
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=317eb9685095678f2c9f5a8189de698c5354316a
• report
  https://access.redhat.com/security/cve/CVE-2023-6931
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6931
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6931
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=382c27f4ed28f803b1f1473ac2d8db0afc795a1b
• report
  https://access.redhat.com/security/cve/CVE-2023-51042
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-51042
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-51042
• article
  https://github.com/torvalds/linux/commit/2e54154b9f27262efd0cb4f903cc7d5ad1fe9628
• report
  https://access.redhat.com/security/cve/CVE-2023-51043
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-51043