Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 59

Vulnerabilities 2

• High 7.8
  CVE-2023-6931 Public exploit

  Out-of-bounds write in Linux kernel's Performance Events system component

  A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation. A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 19, 2023
• Medium 5.5
  CVE-2021-33631

  Kernel crash in EXT4 filesystem

  Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0.

  openEuler kernel linux-raspi2 linux-hwe Debian Ubuntu
  Jan 18, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2252731
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2261976
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1836.json
• report
  https://access.redhat.com/security/cve/CVE-2021-33631
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-33631
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-33631
• article
  https://seclists.org/oss-sec/2024/q1/65
• report
  https://access.redhat.com/security/cve/CVE-2023-6931
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6931
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6931
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=382c27f4ed28f803b1f1473ac2d8db0afc795a1b