Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 72

Vulnerabilities 5

• High 7.8
  CVE-2023-4622 Public exploit

  Use-after-free in Linux kernel's af_unix component

  A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 6, 2023
• High 7.8
  CVE-2023-4623

  Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component

  A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation. If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 6, 2023
• Medium 5.6
  CVE-2023-25775

  Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an un…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Aug 11, 2023
• Unscored —
  CVE-2020-36558

  A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and gen…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 21, 2022
• Unscored —
  CVE-2023-2002 Public exploit

  A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  May 26, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2112693
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187308
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2231410
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2237757
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2237760
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2004.json
• report
  https://access.redhat.com/security/cve/CVE-2020-36558
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-36558
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-36558
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6cd1ed50efd88261298577cd92a14f2768eddeeb
• report
  https://access.redhat.com/security/cve/CVE-2023-2002
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2002
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2002
• article
  https://www.openwall.com/lists/oss-security/2023/04/16/3
• report
  https://access.redhat.com/security/cve/CVE-2023-4622
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-4622
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-4622
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-6.1.y&id=790c2f9d15b594350ae9bca7b236f2b1859de02c
• report
  https://access.redhat.com/security/cve/CVE-2023-4623
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-4623
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-4623
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b3d26c5702c7d6c45456326e56d2ccf3f103e60f
• report
  https://access.redhat.com/security/cve/CVE-2023-25775
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-25775
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-25775
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00794.html