Skip to content
OpenAdvisories
Critical RHSA-2024:1253 6 CVEs

Red Hat Security Advisory: kernel live patch module security update

Published Sep 13, 2024 · Updated Sep 20, 2026

Ecosystem: Red Hat

Fixed packages 15

ReleasePackageFixed in
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::baseos kpatch-patch-5_14_0-70_64_1 0:1-6.el9_0
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::baseos kpatch-patch-5_14_0-70_64_1-debuginfo 0:1-6.el9_0
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::baseos kpatch-patch-5_14_0-70_64_1-debugsource 0:1-6.el9_0
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::baseos kpatch-patch-5_14_0-70_70_1 0:1-5.el9_0
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::baseos kpatch-patch-5_14_0-70_70_1-debuginfo 0:1-5.el9_0
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::baseos kpatch-patch-5_14_0-70_70_1-debugsource 0:1-5.el9_0
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::baseos kpatch-patch-5_14_0-70_75_1 0:1-4.el9_0
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::baseos kpatch-patch-5_14_0-70_75_1-debuginfo 0:1-4.el9_0
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::baseos kpatch-patch-5_14_0-70_75_1-debugsource 0:1-4.el9_0
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::baseos kpatch-patch-5_14_0-70_80_1 0:1-3.el9_0
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::baseos kpatch-patch-5_14_0-70_80_1-debuginfo 0:1-3.el9_0
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::baseos kpatch-patch-5_14_0-70_80_1-debugsource 0:1-3.el9_0
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::baseos kpatch-patch-5_14_0-70_85_1 0:1-2.el9_0
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::baseos kpatch-patch-5_14_0-70_85_1-debuginfo 0:1-2.el9_0
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::baseos kpatch-patch-5_14_0-70_85_1-debugsource 0:1-2.el9_0

Vulnerabilities 6

  • Critical 10.0
    CVE-2023-2163 Public exploit

    Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation

    Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-3390 Public exploit

    Use-after-free in Linux kernel's netfilter subsystem

    A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vu…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-3609 Public exploit

    Use-after-free in Linux kernel's net/sched: cls_u32 component

    A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the refe…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-4622 Public exploit

    Use-after-free in Linux kernel's af_unix component

    A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.0
    CVE-2023-6546 Public exploit

    Kernel: gsm multiplexing race condition leads to privilege escalation

    A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem …

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • High 7.0
    CVE-2024-0646

    Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

    An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privile…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2213260
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2225201
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2237760
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2240249
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2253908
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2255498
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1253.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-2163
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-2163
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-2163
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed
  • report
    https://access.redhat.com/security/cve/CVE-2023-3390
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-3390
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-3390
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1240eb93f0616b21c675416516ff3d74798fdc97
  • report
    https://access.redhat.com/security/cve/CVE-2023-3609
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-3609
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-3609
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=04c55383fa5689357bcdd2c8036725a55ed632bc
  • report
    https://access.redhat.com/security/cve/CVE-2023-4622
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-4622
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-4622
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-6.1.y&id=790c2f9d15b594350ae9bca7b236f2b1859de02c
  • report
    https://access.redhat.com/security/cve/CVE-2023-6546
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-6546
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-6546
  • article
    https://github.com/torvalds/linux/commit/3c4f8333b582487a2d1e02171f1465531cde53e3
  • article
    https://www.zerodayinitiative.com/advisories/ZDI-CAN-20527
  • report
    https://access.redhat.com/security/cve/CVE-2024-0646
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-0646
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-0646
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5a595000e267